got access control tests working