Permissions endpoints tests