we have a schema that tries to do permission inheritance