insert three new test for user permission