Don't you want to test the updatePermission() endpoint as well?