secure access levels controller and fix test