I think I’ve hit a permissions hole: as a regular authenticated user with no AddContent rights on a target…

I think I’ve hit a permissions hole: as a regular authenticated user with no AddContent rights on a target…: a task in MiMo-V2.6-RL-harbor-code: MiMo-V2.6-RL Code (Harbor) (Harbor dataset). Expected outcomes: - POST .../@duplicate must not allow a request body value such as "check permission"…