Add object-level permissions for Collections (bug 906862)