aggregation: attempt to test permissions