Add the concept of global validation errors on entity operations for #849
Solidify row-level security API for #849
- Add hooks to the existing class-level security service
- Enhance the API to take in an explicit AdminUser
- Final draft of what validation API looks like on UPDATE and REMOVE requests