Add more permits controller tests