CLC-2173 Move authorization check into CanvasRosters feeds