tests around listurls and showpermission views