adjusted for new get_permission rule with flags only
required minitest