only test methods for user TEST where access is allowed