it('should only allow to read', async () => {
      const auth = new AuthorizationService(
        new MongoPermissionsDataSource(getConnection(), DefaultTransactionManager()),
        undefined
      );