@Test public void canDisallowAccess() {

  Response response = resource.disallowAccess(user, new LongParam(Long.toString(secret.getId())),
      new LongParam(Long.toString(group.getId())));
  assertThat(response.getStatus()).isEqualTo(200);
  verify(aclDAO).findAndRevokeAccess(secret.getId(), group.getId(), auditLog, "user",new HashMap<>());
}