Adopt new permissions structure and populate default owner on create.
Only object owners may update ownable objects.