simplify and add tests for permission verifiers