final ObjectAdapter row = context.getMappedObject(rowId);
final String fieldName = context.getParameter(FIELD);
final ObjectAssociation field = parent.getSpecification().getAssociation(fieldName);
if (field == null) {
throw new ScimpiException("No field " + fieldName + " in " + parent.getSpecification().getFullIdentifier());
}
if (field.isVisible(IsisContext.getAuthenticationSession(), parent, where).isVetoed()) {
throw new ForbiddenException(field, ForbiddenException.VISIBLE);
}