Context:

We want to indicate on users/groups whether they lack authorizations for the current scope of a collection. See parent task

AT:

• on retrieving collection roles authorizations are validated for each identity on the current scope of the collection
  • the state is exposed with a new property hasFullScopeAuthorizations on the role entries of the /collection/:id/role endpoint
• the documentation of the Get Collection Roles Endpoint is updated
• as only managers should be able to see users authorisation status, the property should only be filled when the current user is a manager