Adjusted abstract collection service to handle permissions with stars in...

... the middle. AbstractCollectionService Now delegates to an internal getItemsById which skips the permissions check (invoked anyway further down the execution path).