ui: permissions: visualise the overridden 'public' rights also for apps