Flow in db namespace is bad.

Moved tx + two calls to service, but abstracted away sql specifics
The whole find + grant should be in one transaction.
Serializing transactional db operations.