device service refactoring (find by uuid with permissions check)