The existing permission checks are skipped under the following conditions:
- dfs.permissions.enabled is set to false. (There are several exceptions stated in the documentation.)
- The user is the super-user.
- The user is a member of the super-user group.
Add tests verifying that ACL enforcement is also skipped for all of these cases.