Add row permissions

[jmaupetit]

Purpose

We need to ensure that request user only have access to data link to its organization, e.g. its groups and related operational units.

Proposal

• [x] add endpoints row-permissions filtering
• [x] fix broken tests