Since object-ids is filtered by user visibility, clients writing the list
back omit files the user cannot see, which were then treated as removed
and rejected with a 403. Only visible files are now added or removed.
Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>