@Test(expected = NotFoundException.class)
public void missingSecretAllow() {

  doThrow(IllegalStateException.class).when(aclDAO).findAndAllowAccess(3, group.getId(), auditLog, "user",new HashMap<>());
  resource.allowAccess(user, new LongParam("3"), new LongParam(Long.toString(group.getId())));
}