more efficiently test system-ctnr membership
don't catch exception when checking whether object is in container
Merge branch 'obj_has_perm' into tablefy_row_permissions