Create regression tests for permissions and field exposure

The combinations of fields and permissions is quite complex and difficult to test - a proper mock client based test suite should be established and the full requirements documented, then tested so we can confirm things don't get broken.

Complex issues can be reported with a failing test case once the hard work of setting up the initial examples as templates are done.