Use friendly names for permissions, e.g. admin, read, deploy, delete, annotate.
Tests for getters and setters.