3171: Add tests for desired behavior. Start using FactoryGirl.
3171: Outdent giant "if ... else return self" construct.
3171: Do not follow permission graph through a User, unless permission on the User is can_manage. Restore usual permission model to user lookups. Add tests.
3171: Update tests to conform to new permission behavior.

Obey "select" parameter during #show too, not just #index.
3171: Add fixtures to make Workbench tests pass under new permission rules.
3171: Skip find_object_by_uuid during :create action.
3171: Do not use select param for database lookup during create/destroy actions.
3171: Merge branch 'master' into 3171-group-membership

Conflicts:
	services/api/test/fixtures/links.yml
Merge branch '3171-group-membership' refs #3171