Test filter owning-entities from /category_parameter by permissions