Right, @ares agreed that permission filters don't inherit from parents automatically.  You need to make two separate filters.