Review API Authorisation

Check each new or changed endpoint for the authorisation check on the object requested.

• code
• check