fixes #443 - Added AuthorizationService which enforce navigation
assignment, getEntity requests and filter menu trees.
*** check for global flag on action (as in other actions jspx)