testing permissions