Permissions enforcement in all services.

Add context_id to all protected models. Enforce permissions at all services, including queries and fulltext search.