Access Control: adapt to PRE_GET semantics (#592).

Topic/Association permissions are checked *before* the Topic/Association is actually instantiated.

See #592.