Merge pull request #94 from SawamiWataru/Issue-82-Change-privilege-of-GetBoxURL-API

#82 Change execution privilege of GetBoxURL API.

Author: SawamiWataru

src/main/java/io/personium/core/rs/cell/BoxUrlResource.java

@@ -94,6 +94,8 @@ public final Response boxUrl(@QueryParam("schema") final String querySchema) {
             throw PersoniumCoreException.Auth.NECESSARY_PRIVILEGE_LACKING;
         }
 
+        // TODO Should the order of box acquisition and check processing be reversed?
+        // Only when it is necessary to acquire ACL of box, obtain box and check.
         // 認証トークンの有効性チェック（有効期限の切れているトークンなど）
         DavCmp davCmp = ModelFactory.boxCmp(box);
         DavRsCmp boxUrlRsCmp = new BoxUrlRsCmp(this.cellRsCmp, davCmp, this.accessContext, box);