removed duplication and prefetch related (not needed because permissions are not read but are written afterwards)