added tests for list permissions

here you go