I am still unsure of your usecase, but if you want to allow deleting individual permissions, you may have to have one relationship per permission