Do not allow modifying collections a user does not own