content.setContentUrl(URLUtils.makeContentURL(fbItemId, "Post"));
IFacebookClientFactory mockFactory = EasyMock.createMock(IFacebookClientFactory.class);
// set private property using reflexion
setPrivateField(securityFilter, "factory", mockFactory);
IFacebookRESTClient mockClient = EasyMock.createMock(IFacebookRESTClient.class);
String accessToken = securityFilter.getUserAccessToken().get(user);
EasyMock.expect(mockFactory.createFacebookAPIClient(accessToken)).andReturn(mockClient);
JsonObject jsonObject = new JsonObject();
jsonObject.put("id", fbItemId);
EasyMock.expect(mockClient.getObjectByID(fbItemId)).andReturn(jsonObject);
EasyMock.replay(mockFactory, mockClient);
boolean isAllowed = securityFilter.canRead(user, password, content);