Test each custom permission against each resource

This change creates a table test to test is configured custom ability
against a hierarchy of resources.