* now when no permissions are given to view dossiers the endpoint to get dossier attributes returns an empty list instead of a 403 access denied
* now when no permissions are given to view dossiers the endpoint to get dossier attributes returns an empty list instead of a 403 access denied