getting usernames with given permission works and is tested