safer validation permission testing