Add tests for grants on _user