Allow object-level permission check