revisit response model

• models with relation ships, when do we need to provide which relation ship
• e.g.
  • created_by_user could contain information about the user and should only be added in detail request (one entity)
  • permission_group could be included in the lists for the ingests and parser
  • maybe in detail request of a project all it's related entities could be included