def METHOD_NAME(server, parentChain, user):
    # Test access denied response for access 'hidden folder' for user without access rights
    resp = server.request(path='/resource/%s/path' % parentChain['folder4']['_id'],
                          method='GET', user=user,
                          params={'type': 'folder'})
    assertStatus(resp, 403)