permission testing

@fuqcool