Should add test for requiring an array of permissions as well.