Added object authorization checks on current user requests