fix bug and let child group inherits parent group's permissions