Check for group permissions before post
requested to merge check_for_group_permissions_before_post into 67-implement-a-right-management-prototyp
The Backend should also check for permissions before accepting a post request.
The following checks are implemented:
- A private Object can only be added if no permission group_ids are sent in request.
- An Internal or a Public object should always have at least one goup_ig in request.
This should solve the Bug listed in : https://notes.desy.de/3vMdVD_PSW2QVQOGdAZnvQ#