Save user specified in QueryDefinition in db
Improve comments on AccessLevel
Implement access checks for new resource types