correctly check owner permissions