Rights check on Update, PartialUpdate and DestroyAllowedMetaData
Closes #1091 (closed), #1092 (closed), #1093 (closed)
No change at all in the endpoints, just moar tests, especially for HTTP 404 errors and for required roles.
Closes #1091 (closed), #1092 (closed), #1093 (closed)
No change at all in the endpoints, just moar tests, especially for HTTP 404 errors and for required roles.