user with specific permission is a subrelation?