Problem: missing read stream authorization

[outerlook]

No description provided.

[outerlook]

also important to add the authorization to the correct places if possible. We should be able to determine if a user is authorized to read a certain stream category upfront before getting data. To facilitate this, at this issue it's important to create a helper action. With this, we will probably have a better time with postgres optimizations