update paths in tests we'll actually have permissions for