Testing permissions for custom_url controller