AT:

• evaluate an approach to perform definition/tenant authorizations implicitly on client calls, e.g. using an annotation on rest handlers that have tenant and definition parameters

Hint:
https://stackoverflow.com/questions/25557892/filter-jersey-request-based-on-form-data