#10 spec test for access in catalog controller