keep only common permissions in case of conflicts due to hierarchical permission...