only our entity version may be stored in our storage layer. removed TODO.
deleted auto-generated TODO.
Deleted PermissionDeniedException class. Unused.
yes, allow default scoping if the client doesn't ask for any.
added a TODO and fixed some comment typos.
removed resolved TODOs. Fixed by the resolution of issue #345.