Checks object access - if requireEdit is true, it checks for edit access otherwise just checks for view access.

If we have a successful login and the user is not in our DB, we write a default record for them, so if they change their details we have a spot to save it already NOTE: This is (at time of writing) the only way to add a user to the DB.

Gets all object IDs which the user has access to - if requireEdit is true, it checks for edit access otherwise just checks for view access Returns a map of object id->creator user id.

JWT user has the user ID and permissions that we get from Auth0.

Trying to be very generous here, but maybe this is not enough?.