and typically if you want to express that a permission can go through different layers of definitions, you use a permission at each step