Refactor permission handling

* Use consistent permission for all target domain objects:
    * read, create, owner, update, delete
* Use switch blocks to improve readability
* Fetch target domain objects early to reduce code duplication