Add test for permissions