improved permit tests
better static/dynamic rule application architecture :)