Forcing "type" to be explicit, works best will rollup on the frontend to exclude depdendencies
In this PR we are handling permissions when using twentyORMGlobalManager, and handling permissions for rest api and api key