ACLTest class and an additional Authorization test