Have *Controlled roles automatically assign owners when creating objects.
Fix reading permissions on GET requests.
Merge branch 'master' into bootstrap3