only check for read permissions of parent entity itself