Make test more meaningful.

This test was flawed because the 'before' check didn't check the
same thing as after (it was non-scoped). Also, the fixtures already
granted some of the permissions that we tried to grant here, so some
things would've passed regardless.
Fix test so failures are caught accounting for backend bug #23