diff --git a/xos/core/tests.py b/xos/core/tests.py
index fc90b34..3c123d4 100644
--- a/xos/core/tests.py
+++ b/xos/core/tests.py
@@ -5,6 +5,7 @@
 from rest_framework.test import APIClient
 from rest_framework.test import APITestCase
 import json
+from django.forms.models import model_to_dict
 
 from core.models import *
 
@@ -80,7 +81,7 @@
         self.assertEqual(len(parsed), 1)
         self.assertEqual(parsed[0]['login_base'], 'test_')
 
-    def test_create_site_API(self):
+    def xtest_create_site_API(self):
         """
         Create a Site trough API
         """
@@ -94,3 +95,78 @@
         self.assertEqual(response.status_code, status.HTTP_201_CREATED)
         self.assertEqual(Site.objects.count(), 2)
         self.assertEqual(Site.objects.filter(name="Another Test Site").count(), 1)
+
+
+class SliceTestAPI(APITestCase):
+    fixtures = []
+
+    def setUp(self):
+        self.site = Site.objects.create(
+          name="Test Site",
+          login_base="test_"
+        )
+        self.pi = SiteRole.objects.create(role='pi')
+        self.user = User(
+            username='testuser',
+            email='test@mail.org',
+            password='testing',
+            site=self.site
+        )
+        self.user.save()
+        self.siteprivileges = SitePrivilege.objects.create(
+            user=self.user,
+            site=self.site,
+            role=self.pi
+        )
+        self.serviceClass = ServiceClass.objects.create(
+           name='Test Service Class'
+        )
+        self.client.login(email='test@mail.org', password='testing')
+
+    # TODO
+    # [x] test slice creation
+    # [ ] test slice name validation - return 500
+    # [x] test slice ACL
+    def xtest_create_site_slice(self):
+        """
+        Add a slice to a given site
+        """
+        data = {
+            'name': "test_slice",
+            'site': self.site.id,
+            'serviceClass': self.serviceClass.id
+        }
+        response = self.client.post('/xos/slices/?no_hyperlinks=1', data, format='json')
+        self.assertEqual(response.status_code, status.HTTP_201_CREATED)
+
+    def xtest_validation_slice_name(self):
+        """
+        The slice name should start with site.login_base
+        curl -H "Accept: application/json; indent=4" -u padmin@vicci.org:letmein 'http://xos:9999/xos/slices/?no_hyperlinks=1' -H "Content-Type: application/json" -X POST --data '{"name": "test", "site":"1", "serviceClass":1}'
+        """
+        data = {
+            'name': "wrong_slice",
+            'site': self.site.id,
+            'serviceClass': self.serviceClass.id
+        }
+        response = self.client.post('/xos/slices/?no_hyperlinks=1', data, format='json')
+        self.assertRaise('slice name must begin with test_')
+        self.assertEqual(response.status_code, status.HTTP_403_FORBIDDEN)
+
+    def test_only_admin_can_change_creator(self):
+        """
+        Only an admin can change the creator of a slice
+        """
+        slice = Slice.objects.create(
+            name="test_slice",
+            site=self.site,
+            serviceClass=self.serviceClass,
+            creator=self.user
+        )
+
+        data = model_to_dict(slice)
+        print(data)
+        data['creator'] = 2
+
+        response = self.client.put('/xos/slices/%s/?no_hyperlinks=1' % slice.id, data, format='json')
+        self.assertEqual(response.status_code, status.HTTP_403_FORBIDDEN)