API tests for organization member permissions