Issue Summary

API 2.0: GET /Products returns an empty list for non-superadmin users, GET /Products/{id} returns 404.

The user has ALL the role permissions on but is not a superadmin, the user can see all products in UI.

Steps to Reproduce

1. Get a non-superadmin user API token and use it to
2. send GET <site>/rest/align/api/2/products
3. send GET <site>/rest/align/api/2/products/{id}

Expected Results

Should get the same list of Products the user has access to via UI. In the case with the test user having all permissions on should get the same list superadmin can see.

Actual Results

GET <site>/rest/align/api/2/products

200 OK
[]

GET <site>/rest/align/api/2/products/{id}

404 Not Found
Cannot get product with id {id}.

Workaround

Currently there is no known workaround for this behavior. A workaround will be added here when available