Test permissions on invoice download