There is a common problem across these tests.  There is no separation between testing for the specific scope versus the user has access.