set-up permission tests using factory