31 tests covering all 4 permission sets and bypass scenarios Update HasPermission tests to expect false for scope :own without record