first tests for permission creation/destruction (with AJAX)