Add and test some group permissions checks