Store the derived permissions against the repository-level permissions too