Changed permission check sequence : uses object permissions only if global are not OK