added user permissions test