fixes #2539 - added API puppetrun access permission and test