Spec to make sure permissions are available to client app