async fn check_material_reference_permissions(
    roles: &[Role],
    action: Action
) -> Result<AuthorizationToken, ControllerError>