in this case I'm ok since it will only impact UI data when permissions are actually set, so there is no blockers between user<>object