add tests for grant and revoke