further tests for permission, now passing.
properly handles permission/task/user deletion.