Issue #2869426 by Wim Leers, dawehner, tstoeckler, alexpott, Berdir, larowlan: EntityResource should add _entity_access requirement to REST routes