limit access to xy, tests for xy