tests(controller): allow perms on domains