Override read_permissions to avoid AF::Base can statements; add published media object factory