bug fix with sub areas, now sub areas also get permission checked