Check for object permissions