Make canEdit fall back to session if the object's SubsiteID not there.