Service logic for basic context permission querying
Testing that denial of permissions at the context level works
Testing that permissions return true for a given context when user has permission by default and does not have any explicit context permission set