Permissions for Folders in the repository must be manually configured and granted to the same users that have permissions on the institute. This is because the aclParentObject() of the Folder does not have any reference back to Institute or Partner entities.

The system should somehow automatically link the Folder to it's "owner":

1. /wiews/{instCode} should have ACL parent object set to OID of the Institute with code instCode.
2. /datasets/{uuid} should have ACL parent object set to OID of the Dataset with uuid.

Setting these ACL parents will allow user management on the "owner" level while respecting these same permissions on the Folder and File entities.

Implementation

1. Folder for institute should be "ensured" and linked when the institute record is created/updated.
2. Dataset folder created when the Dataset is registered.