Unable to attach ISO in child domain to an Instance

### problem

As of now a domain admin doesn't have access to the templates & ISOs created in it's child domains.
For example,
Assume in domain Root/D1, user u1 (Domain Admin)
Assume in domain Root/D1/D2, user u2

As of now, u1 cannot attach an ISO present in domain D1/D2 to an Instance in domain D1/D2.

### versions

_No response_

### The steps to reproduce the bug

1. Create Domains & Users like below
domain Root/D1, user u1 (Domain Admin)
domain Root/D1/D2, user u2
2. As u2, register an ISO (non-public) in D1/D2 and then launch an Instance in D1/D2.
4. As u1, I should be able to attach the registered ISO to the launched Instance in D1/D2.

### What to do about it?

As a Domain Admin, I should be able to attach an ISO to an Instance when both the ISO & the Instance are in child domains.

使用 Root/D1/D2、用户 u1 和 u2、一个非公开 ISO 以及 D1/D2 中的一个实例重现该层次结构。跟踪附加 ISO 时使用的授权路径，并比较域管理员的访问权限与 ISO 和实例所属的域；当 u1 能够将子域的 ISO 附加到子域的实例，同时不削弱无关的访问控制时，即表示完成。

由索引模型根据 Issue 内容生成。