diff --git a/test/test_api_security.py b/test/test_api_security.py
index 979986c8c..bc65ecdfe 100644
--- a/test/test_api_security.py
+++ b/test/test_api_security.py
@@ -11,7 +11,7 @@ from initdb import setup_database_for_testing, finished_database_for_testing
 from endpoints.api import api_bp, api
 
 from endpoints.api.team import TeamMember, TeamMemberList, OrganizationTeam, TeamMemberInvite
-from endpoints.api.tag import RepositoryTagImages, RepositoryTag, ListRepositoryTags
+from endpoints.api.tag import RepositoryTagImages, RepositoryTag, ListRepositoryTags, RevertTag
 from endpoints.api.search import FindRepositories, EntitySearch
 from endpoints.api.image import RepositoryImageChanges, RepositoryImage, RepositoryImageList
 from endpoints.api.build import (FileDropResource, RepositoryBuildStatus, RepositoryBuildLogs,
@@ -2481,6 +2481,61 @@ class TestRepositoryImage5avqBuynlargeOrgrepo(ApiTestCase):
     self._run_test('GET', 404, 'devtable', None)
 
 
+class TestRevertTagHp8rPublicPublicrepo(ApiTestCase):
+  def setUp(self):
+    ApiTestCase.setUp(self)
+    self._set_url(RevertTag, tag="HP8R", repository="public/publicrepo")
+
+  def test_post_anonymous(self):
+    self._run_test('POST', 401, None, {u'image': 'WXNG'})
+
+  def test_post_freshuser(self):
+    self._run_test('POST', 403, 'freshuser', {u'image': 'WXNG'})
+
+  def test_post_reader(self):
+    self._run_test('POST', 403, 'reader', {u'image': 'WXNG'})
+
+  def test_post_devtable(self):
+    self._run_test('POST', 403, 'devtable', {u'image': 'WXNG'})
+
+
+class TestRevertTagHp8rDevtableShared(ApiTestCase):
+  def setUp(self):
+    ApiTestCase.setUp(self)
+    self._set_url(RevertTag, tag="HP8R", repository="devtable/shared")
+
+  def test_post_anonymous(self):
+    self._run_test('POST', 401, None, {u'image': 'WXNG'})
+
+  def test_post_freshuser(self):
+    self._run_test('POST', 403, 'freshuser', {u'image': 'WXNG'})
+
+  def test_post_reader(self):
+    self._run_test('POST', 403, 'reader', {u'image': 'WXNG'})
+
+  def test_post_devtable(self):
+    self._run_test('POST', 404, 'devtable', {u'image': 'WXNG'})
+
+
+class TestRevertTagHp8rBuynlargeOrgrepo(ApiTestCase):
+  def setUp(self):
+    ApiTestCase.setUp(self)
+    self._set_url(RevertTag, tag="HP8R", repository="buynlarge/orgrepo")
+
+  def test_post_anonymous(self):
+    self._run_test('POST', 401, None, {u'image': 'WXNG'})
+
+  def test_post_freshuser(self):
+    self._run_test('POST', 403, 'freshuser', {u'image': 'WXNG'})
+
+  def test_post_reader(self):
+    self._run_test('POST', 403, 'reader', {u'image': 'WXNG'})
+
+  def test_post_devtable(self):
+    self._run_test('POST', 404, 'devtable', {u'image': 'WXNG'})
+
+
+
 class TestRepositoryTagHp8rPublicPublicrepo(ApiTestCase):
   def setUp(self):
     ApiTestCase.setUp(self)