permission updates (permission routing to parent objects, and other adjustments)