CrudPermission read_owned (to be implemented)