EPIC | Authorization v1

[maxyu1115]

Currently MeMaS does not check if the claimed user is authorized to do X. Even though we trust their claim of who the user is, we still need to verify if they have the rights/permissions to perform the action they request.

This at its early stages involve:

1. CP APIs can only modify nodes below the user, such as user1 can have control over user1.A.B:C, but not over user2.X
2. DP API memorize can only write to corpuses directly below the user (? To be debated if this is necessary)
3. DP API recall can read only from corpuses that belong to the user, or belong to direct ancestors. Such as companyA.team1.user1 can read from the corpus companyA:C, but not companyA.team2:X.
4. Enforce read/write permissions

TRACKS: #19, #25