@Test(expected = NotFoundException.class)
public void missingGroupAllow() {

  doThrow(IllegalStateException.class).when(aclDAO).findAndAllowAccess(secret.getId(), 98, auditLog, "user",new HashMap<>());
  resource.allowAccess(user, new LongParam(Long.toString(secret.getId())), new LongParam("98"));
}