added attribute "scope" to permission-object, adapted unit-tests