test to make sure admin attribute is not accessible