Node ID is not required if filter is not a NodeDatumFilter.
Start work on unit tests for QuerySecurityAspect class.
Throw more specific AuthorizationException when actor expected, instead
of more general SecurityException.
Add more tests.