add tests to permissions