added permission tests