Add tests for permissions grant and revoke