Add test to check admin attr is not accessible