public void GivenAWorkspaceAccessControlListsThenAWorkspaceDeniedPermissionsIsNotPresent() { var administrator = new PersonBuilder(this.Session).WithUserName("administrator").Build(); var administrators = new UserGroups(this.Session).Administrators; administrators.AddMember(administrator); this.Session.Derive(); this.Session.Commit(); var workspacePermissions = new Permissions(this.Session).Extent().Where(v => v.OperandType.Equals(M.Person.WorkspaceField)); var workspaceReadPermission = workspacePermissions.First(v => v.Operation == Operations.Read); administrator.AddDeniedPermission(workspaceReadPermission); var workspaceAccessControlLists = new WorkspaceAccessControlLists(administrator); var acl = workspaceAccessControlLists[administrator]; var deniedWorkspacePermissions = acl.DeniedPermissionIds; Assert.Contains(workspaceReadPermission.Id, deniedWorkspacePermissions); }