fix: proper permissions for schema endpoints

[davidlougheed]

these should be properly public.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 90.99%. Comparing base (3c7e196) to head (b12fd9a).
Report is 2 commits behind head on develop.

Additional details and impacted files

@@           Coverage Diff            @@
##           develop     #542   +/-   ##
========================================
  Coverage    90.99%   90.99%           
========================================
  Files          131      131           
  Lines         4939     4939           
  Branches       705      705           
========================================
  Hits          4494     4494           
  Misses         299      299           
  Partials       146      146           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[v-rocheleau]

Lgtm. There are still decorators using the AllowAny permission class, should they be replaced as well?

[davidlougheed]

There are a lot of endpoints (search mostly) I haven't thought through yet, so for now I'm leaving them as-is - these were already included in the authz middleware allow-list, but didn't have the proper permissions to be served.