Stichworte: testing proper authorization