making sure reduced permissions work