cleaned up access-rule added test