timing issue for testing user permissions