// this new user has no roles - therefore, no global permissions
assert authorizationManager.getExplicitGlobalPermissions(new_user).size() == 0;
try {
subjectManager.deleteUsers(new_user, new int[] { new_user.getId() });
assert false : "The new user should not have had the permission to delete itself";
} catch (PermissionException e) {
} finally {
// PermissionException causes a rollback, let's start a new tx
getTransactionManager().rollback();