Added permission check to list_users endpoint, and added tests.