Results 3 comments of marc

> > we validate ownership, and if no program is present, we validate the enrollment org unit. > > enrollment orgunit is te orgunit? yes, I changed the description, it...

> @muilpp, the PR is getting really difficult to follow; I'll try to do a review. Mainly, I have questions about this part: > > ``` > > if (programService.getAllPrograms().stream()...

we'll postpone this until it's clear when to return 404 vs 403