it should also be noted that enable/disable isn't generally on a permission level but on a relation level