Write tests for users with various access_levels. Implement access_level authorization.