custom permissions tests