New object handling with authz_ownership