Secure app with user permissions; add specs to confirm permissions are configured correctly

the indentation is out of wack here, seems like it's 4 spaces and doubled-up. Fix it to follow the 2 spaces convention