Missing tests for each action being protected by permissions.