shared_examples_for 'access denied' do
  it 'should not allow read' do
    expect(ability).to_not be_able_to(:read, resource)
  end