# 1.2 — rbac_test.go (RED)
Phase: 1 — Atlas Core
Stage: RED
- [ ] atlas ServiceAccount receives 403 on `get secrets` in every namespace
## Verify
```bash
kubectl auth can-i get secrets --as=system:serviceaccount:portfolio:atlas # no
go test ./... -run TestRBAC -v
```