[READY][3.8.6] Apply user rights on sub-definition

- [x] tests