should only defer SAFE permissions to object_permission handler