[3.8.6] Apply user rights on sub-definition

- [ ] tests