Make validation of ownership and permissions consistent

This should make it more difficult to enter malformed ownership information.
Copied the nice pattern from the dirperm schema.