test the AllowAuthor permission class