poc access rights tests