often collections are also owned by another resource like an organization, which could have

permission list_widgets = ...