Properly authorize our own GraphQL scalar types

What does this MR do?

Check for any type of scalar type, built-in or subclassed

Does this MR meet the acceptance criteria?

Conformity

• Code review guidelines
• Merge request performance guidelines
• Style guides

Closes #60800 (closed)