ovl: fix permission checking for setattr