@Test(expected = NotFoundException.class)
public void missingSecretDisallow() {

  doThrow(IllegalStateException.class).when(aclDAO).findAndRevokeAccess(2, group.getId(), auditLog, "user",new HashMap<>());
  resource.disallowAccess(user, new LongParam("2"), new LongParam(Long.toString(group.getId())));
}