You can use xm to test if a domain can access its resources:

 
xm dry-run [configfile]  

This checks each resource listed in your configfile. It lists the status of each resource and the final security decision.