permissions validation fix (for shared media objects)