Broken perms?

As pointed out in #1096, parent-child permission relationships are a bit weird: The parent permission **overrides** the child permission!

The work in this branch is not finished yet, so I wouldn't want this to be pulled now but I'm looking for some feedback on whether this is a good or a bad approach to solve the issue.