If you create an new backend user and assign no access right the backend is broken. A test for that would show the issue ... So we should add more tests