adds check for owner attr in obj in has_perm permission lookup