Add ability to authorize read/open opertions with userId, based on
primary ownership or participatory (invitation based).