subject-parent introduced

the check for subject can’t be recursive, as there is a difference in
taking a subject from the current node and from ancestor node (i.e.
@resource is checked first)