ObjectEditor: implement rudimentary privacy predicate

TODO: this predicate should be &ed with a predicate based on the
filterbox