Verified Permissions: Making an isAuthorizedWithTokenCall per note is too expensive

[bluprince13]

Unfortunately, as of today, there is no way in Verified Permissions to either:

• Get a list of resources that a users is authorised to do an action on
• Batch isAuthorized calls into a single request

Currently on the dashboard, we make an isAuthorizedWithTokenCall per note. See notes/server.ts.

This is very inefficient and could get very expensive as number of users or notes gets bigger.

[bluprince13]

Could use https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html