Testing the RBAC rules