I find it hard to grasp, as in, why is_ancestor being defined as a permission?