Steps to reproduce
assign a permission that has subPermissions to a user (this is a immutable permission part of some module).
Upgrade the module with a new permission added to the list of subPermissions.
The user is rejected when accessing the path with the new permission in subPermissions.
The user should be able to access the path the permission has it has as part of subPermissions.