Permission specs

Updated after refactoring