How to add authorization to filter nested data - Ash Framework