fix(plugin-security): a controlled_by_parent detail's read scope requires object-level read on its master

fix(plugin-security): a controlled_by_parent detail's read scope requires object-level read on its master #187