Fix filter manageable media resources by current user

Added spec that verifies that not authorized user can update a userpermission
Front end fixes for collection permissions bug

Check for empty target user when transferring ownership