return permission denied when anonymous user tries to use REST
4 files changed