Currently some of the Action API tests in core use global PermissionManager to set up special permissions for the user executing the API calls. With conversion to Authority, this will keep working, but we can simplify the setup by allowing to pass in Authority into ApiTestBase methods and creating correct SimpleAuthority in tests directly.
Acceptance criteria: api tests in core don't reference PermissionManager.