If I use those permissions on the child object, I get the records, but I get everything instead of just the ones for the portal visitor. Continue reading...