I think this causes the authz groups to be loaded when just viewing the contentresource. I was hoping we could just rely on authz checks when viewing the ListItem and only when changes the roles or editing an item actually have to load the authzgroup/roles.