Some permission-checking was skipped when the logged-in user was using the API.
Pull-Request has been merged by abompard
Some permission-checking was skipped when the logged-in user was using the API.