Also test with user_nobody.has_permission.