Added permission check around code that creates Bags on object ingest and modification.