Context:
Currently, we can add scopes for definitions that the user is not allowed to see.
AT:
- a user can only add scopes to a collection where he is authorized to
- a user is authorized for a collection if he is authorized to see the definition type, key and tenants of a scope