authz: prevent access to repos with no external repo spec
Created by: beyang
In case the external repo spec is not set in the DB, the repo will not be accessible to any user, because we have no way of assigning that repo to an external service and verifying its permissions.