Testing the fine-grained authorization
