RBAC: Test coverage