Fixing hierarchical permission updates