Reworking DAOs, Authorization seems to work, needs more tests. Next steps: Move Container or File/Update DataObject.