Put purchase actions behind perform_purchase permission
Give user new perform_purchase permission to fix broken test