Annotations API endpoints don't enforce permissions
Annotations API endpoints don't enforce permissions: a task in MiMo-V2.6-RL-oss: Agentic RL Environments (MiMo RL release). I'm wiring up the activity feed to include annotations, and I noticed that the methods on the Annotations API class (createAnnotation, deleteAnnotation, getAnnotation…
The task
I'm wiring up the activity feed to include annotations, and I noticed that the methods on the Annotations API class (createAnnotation, deleteAnnotation, getAnnotation, getAnnotations) just fire off the HTTP request without first checking whether the caller actually has…
Part of XiaomiMiMo/MiMo-V2.6-RL-oss.