Function headless_lms_server::domain::authorization::check_course_instance_permission

async fn check_course_instance_permission(
    conn: &mut PgConnection,
    roles: &[Role],
    action: Action,
    course_instance_id: Uuid
) -> Result<AuthorizationToken, ControllerError>

Also checks organization and course roles which are valid for course instances.