Merge change 4209 into donut

* changes:
  More tests to check permissions in PackageManager api's are enforced