allow collections in the security context
add permission conditions configuration
add owner condition