Authorization safe loading

[techsmyth]

Description

As a developer I want to be confident that authorization is properly cascaded

Acceptance criteria

• [ ] All authorization services to load the child entities that are needed for authorization, not relying on passed in entity

Additional Context

See approach used in space authorization etc.