work on #4 - permissions appear to work (need more tests), and tests
work individually but not when run all together
Fixed tests - closes #4