Tests for new security server permissions API