Context:
We want to indicate on users/groups whether they lack authorizations for the current scope of a collection. See parent task
AT:
- on retrieving collection roles authorizations are validated for each identity on the current scope of the collection
- the state is exposed with a new property hasFullScopeAuthorizations on the role entries of the /collection/:id/role endpoint
- the documentation of the Get Collection Roles Endpoint is updated
- as only managers should be able to see users authorisation status, the property should only be filled when the current user is a manager