Permissions don't seem working

I have the following structure of objects in the app:

Hi Andrey,

Thanks for reporting, we shall investigate this and notify you about the results.

Unfortunately, this is the expected behaviour for now - we don’t yet support checking permissions for related entity. Though it may be fixed in the future, we can’t provide any exact time frames.

As a workaround, you should configure the same permissions for a parent entity, which is QuestionResult in your case.

But in the end all of my entities goes to the User entity! I obviously can’t deny Update for the User.
Any other suggestions?

As a workaround create a copy of the QuestionResult on the client-side and modify the property in the object copy for internal reasons.