added some basic tests for permissions