added more Permissions tests; fixed some Ability ambiguities