we're not using object rights, they are the same as the rest of the record. also, object should point to the thumbnail