Experimentally add permission checking to wm_object resource