cleanup authorization flows

• standardized get_queryset variant which takes a list of applications and filteres the model by the applicable key
• PermissionClass for retreives