fixed permission aggregation,broken due to change of join table PK