authz: add a test case to cover no updated user pending permissions

Created by: unknwon

Follow up of #14739