Moved authorization checks into the Canvas Roster feed rather than requiring them to be done from outside.