Its asserting that things not published explicitly are not accessible. However it shouldn't depend on existing things, it should instead publish a new thing on the html ui and check the api doesn't expose it.
Its asserting that things not published explicitly are not accessible. However it shouldn't depend on existing things, it should instead publish a new thing on the html ui and check the api doesn't expose it.