Fixed BasePermission to check object owner and project owner too