ObjectType = product, SubjectObjectType = FEATURE, and Permission BELONGS_TO , is what I am sending