hi
It sounds to me like the Permission you are adding uses the LockPermissions table.
You may be better off creating a custom action which launches cacls or xcacls/icalcs or something similar.
Perhaps this question should be asked somewhere else in forums?
Cheers
Pydna