Add testing fixtures for application ownership, operatorship
API should not show disabled entities