Annotations API endpoints don't enforce permissions
Annotations API endpoints don't enforce permissions: a task in MiMo-V2.6-RL-harbor-code: MiMo-V2.6-RL Code (Harbor) (Harbor dataset). I'm wiring up the activity feed to include annotations, and I noticed that the methods on the Annotations API class ( createAnnotation , deleteAnnotation …
The task
I'm wiring up the activity feed to include annotations, and I noticed that the methods on the `Annotations` API class (`createAnnotation`, `deleteAnnotation`, `getAnnotation`, `getAnnotations`) just fire off the HTTP request without first checking whether the caller actually has permission to perform that action on…
Part of FineEnvs/MiMo-V2.6-RL-harbor-code.