Add a test to check double nested scope permissions