and would i need to define the permissions at each level, or is there some way to walk multiple levels to get down to a permission?