Correcting mock api strategy used on dev

Permissions can't be mass-assigned

/cc @benilovj, @bishboria