fn validate_group_inheritance( config: &PermissionGroupsConfig, ) -> Result<(), PermissionConfigError>