[tests] write permission tests for all views