@iNecas the `before_filter :authorize` is no longer necessary as authorization is called automatically:  https://github.com/Katello/katello/blob/roles/app/controllers/katello/api/api_controller.rb#L40