closes #1720 (closed)
requires !2264 (merged)
EDIT: contrary to what it says in the issue, the endpoints require contributor access to the dataset's corpus, excepted for DELETE which requires admin access.
contributor
admin
TODO