Testing client access restrictions