root/q2: links for abac-permissions