you might be able to work around this by always asking the permission on the child itself, and then checking both the direct grant, as well as walking to the parent, in one permission