Fix object level permission check in get_available_user_FIELD_transitions function