programmer247

Proving that the rules you wrote are the rules that are enforced isn't very useful. You said your tests 'weren't proving much', how is this proving more? You need smarter tests, not more of them. That said, access matrix is nice.