Don't change discover/read rights if the object already has explicit ones defined
Replace the 'collection_manager' group with 'manager' in object rights