Topic/313 external api

coscine/issues#314

src/Project/Controllers/DataSourceController.cs

@@ -297,13 +297,12 @@ namespace Coscine.Api.Project.Controllers
                 return BadRequest($"{resourceId} is not a guid.");
             }
 
-#if! DEBUG
             var user = _authenticator.GetUserFromToken();
             if (!_resourceModel.OwnsResource(user, resource))
             {
                 return Forbid($"The user does not own the resource {resourceId}");
             }
-#endif
+
             try
             {
                 resource = _resourceModel.GetById(resouceGuid);