Complete tests and permission API REST exposure.  Note permission objects are found through user and teams, not a permissions
collection.