Classes may be replaced by one branch in object tree ...
subjects < perms > objects/classes < smemb cmemb >