set permission in test auth data