User permission specs passing