unified add-permissions and object-tools-items behavior, #fixed 470 (see also a1d3ff0707ea16795c576a1640d304e32dfe9766)