@Test(expected = ActionDeniedException.class)
public void testHandleActionGuest()
        throws Exception {

    Map<String, String> httpParams = new HashMap<>();
    httpParams.put(ActionConstants.KEY_ID, "1");
    ActionParameters params = createActionParams(httpParams);
    // only gave logged in user role permission so this should throw ActionDeniedException
    handler.handleAction(params);
    fail("Should have thrown exception");
}