Add some permission test and remove one that cannot be run reliably

Both new tests are blocked by new bz bug
you can leave the `add` function and just use:
```python
{"Add Catalog": cat.create}
```
*I personally prefer wrapping such stuff in a lambda so you see that "yes it takes a callable" but that is just a cosmetic detail*