fix permissions, resources the parent object query