diff --git a/test/permissions.js b/test/permissions.js
index <HASH>..<HASH> 100644
--- a/test/permissions.js
+++ b/test/permissions.js
@@ -5,23 +5,21 @@ var access = require('../lib/middleware/access')
 var assert = require('assertmessage')
 var http = require('http')
 
-var sandbox
-beforeEach(function (done) {
-  if (sandbox) {
-    sandbox.restore()
-  }
-  sandbox = sinon.sandbox.create()
-  done()
-})
-
-describe('permissions', function () {
+describe('Permissions', function () {
   var noop = function () {}
   var res = { send: noop }
+  var sandbox
+
+  before(function () {
+    sandbox = sinon.sandbox.create()
+  })
 
   beforeEach(function () {
+    sandbox.restore()
     this.mock = sandbox.mock(res)
-    this.mock.expects('send').once()
-      .withArgs(403, { msg: http.STATUS_CODES[403] })
+    this.mock.expects('send').once().withArgs(403, {
+      msg: http.STATUS_CODES[403]
+    })
   })
 
   describe('with access that returns', function () {
refactor(tests): permissions