test cross access control