Added permissions and auth test