The last time I looked into this (ACS 4.2) the nodes you create inherit
permission from the subsite you create them in. The reason for this is the site
map code is part of the subsite and when you create a node the code puts the
object_id of the subsite into the context id of the node you created.
For example if you go to /admin/site-map and drill down past a subsite and
create a node that node will inherit from the mainsite node. If you go to /admin
and select a subsite, go to it's sitemap and create a node that node will inherit
from the subsite.
I guess this makes sense when you think about it, but I don't think it's
documented. I changed mine to always inherit from the parent. I like that
better but if you do not mount a package before creating a child node it
causes problems. It would be nice if the interface supported picking a
context_id
