Separate authorisation check into workspaceRepository function;
refactor tests to work with this;
add tests for service querying and creation
Tests for getScenario