added basic tests for permissions check