add rspec test, granted_control and revoked_control