Extend test coverage of permission handling

[crazyscientist]

As proposed in #111 there have been some issues regarding the handling of permissions. The logic and especially its test-covered should be reviewed and enhanced.

E.g. the test suite uses a user with superuser permissions for most tests. Tests related to permission handling should cover all cases (i.e. superuser, other users with specific permissions).