Exercise permitAll and no access