restrict mercurial repo access

i have a mercurial server i edited access.conf in hgadmin repo as following:

deny repo=a/b
read user=x/**
read user=y/**

write repo=a/b user=x/abc
write repo=a/b user=y/z

but user z still can't access this repo, any ideas ? Thanks in advance