has_access_rules specs working