LPS-45133 rename to propagatePermission
put logic into ServiceImpl so that it is tx protected