issue: Add tests for access control.