Fixed auth on read, update, delete on networks

Doesn't the above filter logic take care of this?

Even if it doesn't, I'd actually prefer that we throw a NotFound here. The convention for security type things is to never demonstrate that an attacker figured out something about our system. In this scenario, they'd know they found another valid UUID. They may not be able to do anything with that information, but it's always possible we missed a case.