api: alicorn can access any entity

Signed-off-by: Jakub Koudelka <koudelka.j@gmail.com>