Fix ingest permissions...

...  Was allowing on any object... Should only be collections.