req_owner now also checks if user is moderator of given object