Shared_with is probably not working as expected

The authentication predicate that is used to check access to files only tests for a shared user if the predicate is handed a calc_id. For some API endpoints (and other places?) no calc_id is given.