Record ACL should be case insensitive
Entitlements group creation always lowercases the group name, regardless of the input. Storage honors the ACL group name case sensitivity. This creates inconsistency for ACL validation.
**For example:**
User creates a data group called: data.SomeGroup.viewers
Upon this request, Entitlements creates a group called: data.somegroup.viewers
Upon creating a record, the user enters data.SomeGroup.viewers as the ACL.
If the user tries to fetch the record, a 403 is returned since Entitlements only sees group data.somegroup.viewers.
**Fix:**
For existing records (addressing the ghosted records): Storage fetch record validation should lowercase the ACL group against the list of groups returned from Entitlements.
Long term solution: The fix should be in the record creation. Storage PUT API should lowercase the ACL upon record creation. OR We could fail the PUT request if the ACL group has mixed case. Note that there is no ACL group existence validation upon record creation.