Added permissions checking for add_object form