Rest-API should check access permissions and hide restricted objects

Description

Currently all MCRObjects are shown.
Implement an access permission check to prevent this.

We also need a mechanismn to hide certain parts of the metadata.
-> Check how we can use the filter mechanism of ..../receive/mcr_object_0001?XML.Style=xml

Environment

None

Assignee

Robert Stephan

Reporter

René Adler

Labels

None

URL

None

External issue ID

None

Components

Fix versions

Priority

High
Configure