Right now if a plugin wants to implement a similar test to the AccessPermissionsTest, it has to redefine all the constants here:

https://github.com/theforeman/foreman/blob/develop/test/unit/foreman/access_permissions_test.rb#L14

if there are any routes added without a namespace (such as adding a new action to the hosts api). If a test tries to require that file, the test is actually executed and if there are additional items that need to be white listed, those will fail.