storage batch API data authorization does not take care of users.data.root users correctly
The implementation in storage of the ADR (osdu/platform/security-and-compliance/entitlements#123 (closed)) only takes care of the general data authorization logic, however, the batch API is using a different data authorization logic branch which was missed in the previous MR: !694 (merged).
The issue is that, if "disable-data-root-group-hierarchy" FF is enabled, it may cause users who are in the users.data.root group do not have permission to the new acls that they are supposed to have when using storage batch API (because by design, users.data.root users should have permission to all data).