collection ownership checks must cascade to all subelements of a collection

[balmas]

A client application creates data items which are named graphs. One graph may reference part of another graph. Each graph is a distinctly identifiable object. The graphs may belong to multiple collections. We would like to be able to enforce update/delete access to these graphs based upon ownership of one or more of the collections to which it belongs.