Add some tests for access control.