Add object-level permissions for Collections (bug 906862)

r? @mattbasta @diox @cvan