What's the permissions of the sub-branch created by create_isolate_path_op_env_with_access?

[streetycat]

I have created the root as follow:

RootStateOpEnvAccess {
                    path: "".to_string(),
                    access: AccessPermissions::Full,
                }

And, I can get root(95RvaS5btZzoP9ksvBkmED8VE2gXYnV6meo1GXu3WtDt) in other zone, part of the log is follow:

[2023-04-24 17:31:47.306242 +08:00] INFO [ThreadId(5)] [component\cyfs-stack\src\non_api\router\router.rs:401] router get_object default handler, req=common: req_path: None, protocol=data-bdt, zone=(CurrentZone-None-None), dec=9tGpLNnM8nb4RJAKuj6Xe8EehrLuRVNLxLj9SqoZksRb, verified=None, level: router, target: 5r4MYfFPPRDNNcJdvve4XVx3FE355PUDpqaA5Mm9UcFh, flags: 0, object_id: 95RvaS5btZzoP9ksvBkmED8VE2gXYnV6meo1GXu3WtDt, inner_path: None, router=protocol=data-bdt, zone=(CurrentZone-None-None), dec=9tGpLNnM8nb4RJAKuj6Xe8EehrLuRVNLxLj9SqoZksRb, verified=None, target: 5aSixgMxgNuMQFcG41fW1CN7MTsKMqEuVjW16BnJWrGW, direction: local_to_remote, next_hop: 5aSixgMxgNuMQFcG41fW1CN7MTsKMqEuVjW16BnJWrGW, next_direction: local_to_remote

[2023-04-24 17:31:47.580380 +08:00] INFO [ThreadId(2)] [component\cyfs-lib\src\non\requestor.rs:294] get object from non service success: 95RvaS5btZzoP9ksvBkmED8VE2gXYnV6meo1GXu3WtDt, object=95RvaS5btZzoP9ksvBkmED8VE2gXYnV6meo1GXu3WtDt

But, I cannot get the sub-branch(95RvaS5EgYVSZcV1Lisq9xtvuPs9cRu7Mxr8E5s7cfL2) for permissions:

[2023-04-24 17:31:48.866931 +08:00] ERROR [ThreadId(7)] [component\cyfs-lib\src\non\requestor.rs:301] get object from non service error! object=95RvaS5EgYVSZcV1Lisq9xtvuPs9cRu7Mxr8E5s7cfL2, err: (PermissionDenied, noc meta object access been rejected! obj=95RvaS5EgYVSZcV1Lisq9xtvuPs9cRu7Mxr8E5s7cfL2, access=rwxrwxrwx---rwxrwx, require access=---------r--r-----, None)

There are the entire logs:
group-example_21068_r00002.log

The log is complicated, maybe I need a simple test case for it.

[streetycat]

The answer might be in code as follow:

create_object_map

           let sub = obj_list
                .last_mut()
                .unwrap()
                .obj_map
                .get_or_create_child_object_map(&self.obj_map_cache, part, content_type, create_strategy, None)
                .await
                .map_err(|e| {
                    let msg = format!(
                        "get or create object by path error! path={}, part={}, create_strategy={:?}, {}",
                        path, part, create_strategy, e
                    );
                    error!("{}", msg);
                    BuckyError::new(e.code(), msg)
                })?;

The None is passed into access to create the sub branchs, so we can not get branchs in other Zones, even we create the root with AccessPermissions::Full.

So, If I want to access the sub-branchs, I must create the ObjectMap for branchs one by one?

But, I think the access parameter of create_isolate_path_op_env look a bit confusing.