authorize all POST/PUT/DELETE calls for schemas -- schema owner only
make owner data for eval sets and schemas consistent in json serializers