// Arrange
        SmbFile dest = mock(SmbFile.class);
        SmbFileHandleImpl handle = mock(SmbFileHandleImpl.class);
        SmbAuthException authEx = new SmbAuthException("denied");

        when(dest.openUnshared(anyInt(), anyInt(), anyInt(), anyInt(), anyInt())).thenThrow(authEx) // first attempt fails with auth
                .thenReturn(handle); // second attempt succeeds

    # Stop non-essential indexing and link tracking services that
    # may lock new files or symlinks.
    # They may be causing sporadic "Permission denied" errors during Bazel builds.
    # b/461500885
    docker exec tf powershell -NoProfile -Command 'Stop-Service -Name SysMain,DiagTrack -Force -ErrorAction SilentlyContinue'
  fi

fi

		}
	}

	// TestXLStorage for permission denied.
	if runtime.GOOS != globalWindowsOSName {
		permDeniedDir := createPermDeniedFile(t)
		if err = os.Chmod(permDeniedDir, 0o400); err != nil {
			t.Fatalf("Unable to change permission to temporary directory %v. %v", permDeniedDir, err)
		}

		// Initialize xlStorage storage layer for permission denied error.
		_, err = newLocalXLStorage(permDeniedDir)

     */
    @Test
    @DisplayName("toString contains class name and message")
    void toString_containsClassAndMessage() {
        // Arrange
        String msg = "login denied";
        SmbAuthException ex = new SmbAuthException(msg);

        // Act
        String s = ex.toString();

        // Assert
        assertNotNull(s);

        /** Network-related errors (connection, timeout, etc.) */
        NETWORK,
        /** Authentication and authorization errors */
        AUTHENTICATION,
        /** File system errors (not found, access denied, etc.) */
        FILE_SYSTEM,
        /** Protocol errors (invalid message, unsupported operation, etc.) */
        PROTOCOL,
        /** Resource errors (out of memory, disk space, etc.) */
        RESOURCE,

 */
public interface DcerpcError {

    /**
     * Generic fault code for other errors
     */
    int DCERPC_FAULT_OTHER = 0x00000001;
    /**
     * Access denied fault code
     */
    int DCERPC_FAULT_ACCESS_DENIED = 0x00000005;
    /**
     * Cannot perform operation fault code
     */
    int DCERPC_FAULT_CANT_PERFORM = 0x000006D8;
    /**

        assertTrue(ex1 instanceof DcerpcError, "DcerpcException should implement DcerpcError");

        // Test that DcerpcException can be created with string messages
        DcerpcException ex2 = new DcerpcException("Access denied error");
        assertTrue(ex2 instanceof DcerpcError, "DcerpcException should implement DcerpcError");

        // Test with root cause
        Exception rootCause = new Exception("Root cause");

            desiredAccess = 0x2; /* Mmm, I thought 0x03 was RDWR */
        }
        desiredAccess |= SHARING_DENY_NONE;
        desiredAccess &= ~0x1; // Win98 doesn't like GENERIC_READ ?! -- get Access Denied.

        // searchAttributes
        searchAttributes = ATTR_DIRECTORY | ATTR_HIDDEN | ATTR_SYSTEM;

        // fileAttributes
        fileAttributes = 0;

        // openFunction

	// Validate that the client cannot remove any objects
	err = minioClient.RemoveObject(ctx, bucket, "someobject", minio.RemoveObjectOptions{})
	if err.Error() != "Access Denied." {
		c.Fatalf("unexpected non-access-denied err: %v", err)
	}
}

func (s *TestSuiteIAM) TestSTSWithGroupPolicy(c *check) {
	ctx, cancel := context.WithTimeout(context.Background(), testDefaultTimeout)
	defer cancel()

        assertNotNull(messages[0]);
        assertTrue(messages[0].toLowerCase().contains("success") || messages[0].toLowerCase().contains("completed"));
    }

    @Test
    @DisplayName("Should handle access denied status")
    void testAccessDeniedStatus() {
        // Given
        int status = NtStatus.NT_STATUS_ACCESS_DENIED;

        // When/Then
        assertEquals((int) 0xC0000022L, status);