flag_node permission + test