whooooopsies
test permissions and add user_id to fixtures