testing access privs