privilege unit test for ACL