Permissions, users role, more testing