### Question:
IssueApiService { @PreAuthorize(AclExpressions.ISSUE_CREATE) public Issue createIssue(IssueVO issueVO) { return issueManager.createIssue(issueVO); }  @PreAuthorize(AclExpressions.ISSUE_CREATE) Issue createIssue(IssueVO issueVO); @PostAuthorize(AclExpressions.ISSUE_READ) Issue loadIssue(Long issueId); PagedResult<List<Issue>> loadMy(long page, Integer pageSize); @PreAuthorize(AclExpressions.ENTITY_READ) List<Issue> loadIssuesForEntity(EntityVO entityVO); @PreAuthorize(AclExpressions.ISSUE_AUTHOR) Issue updateIssue(Long issueId, IssueVO issueVO); @PreAuthorize(AclExpressions.ISSUE_AUTHOR) Issue deleteIssue(Long issueId); @PreAuthorize(AclExpressions.ISSUE_READ) IssueComment createComment(Long issueId, IssueCommentVO commentVO); @PreAuthorize(AclExpressions.ISSUE_READ) IssueComment loadComment(Long issueId, Long commentId); @PreAuthorize(AclExpressions.COMMENT_AUTHOR) IssueComment updateComment(Long issueId, Long commentId, IssueCommentVO commentVO); @PreAuthorize(AclExpressions.COMMENT_AUTHOR) IssueComment deleteComment(Long issueId, Long commentId);  }### Answer:
@WithMockUser(username = NO_PERMISSION_USER) @Transactional(propagation = Propagation.REQUIRES_NEW, rollbackFor = Exception.class) @Test(expected = AccessDeniedException.class) public void testCreateIssueAccessDenied() { issueApiService.createIssue(getIssueVO(ISSUE_NAME, ISSUE_TEXT, entityVO)); }