1. create it service with child service.
2. assign trigger to child service.
3. login as user without permissions to assigned trigger.
4. edit parent service and assign trigger to it.
5. after parent update, child service changes parent to root.
If same action is done with users with permissions, on child update error is shown about assigning trigger to service with childs.