permission foo = bar + blah->baz : user