CLI - rewrote rest of permission tests to work without subject param