Currently, event though the frontend is restricted, all API functionality is accessible by all CDISCID users.
Acceptance Criteria:
Only users with write permissions (currently this means users in the Core Author Group) should be authorized to perform create, update, delete operations via the api
Currently, event though the frontend is restricted, all API functionality is accessible by all CDISCID users.
Acceptance Criteria: