Added tests to verify correct permissions on catalog controller.  Issue #68