When a user does not have permission to view associated records, a query/mutation fails with no record found. It would be better to let user know about missing permissions instead.

Steps to reproduce:

See update mutation test for media - mutation should return data for associated operating systems. Change the test for non-admin user that tries to update a medium by assigning only permissions to view media. The error will be: No object found for `operatingsystemIds: "#{global_id}"` instead of unauthorized.