How it works

Some simplified resources are missing permission settings on api endpoints.

Improvement suggestion

• /api/import_bnf/?q=* and "import from the web" menu, should be restricted to logged users with full_permissions or cataloging_manager
• /api/item/inventory?q=* should be restricted to any professionnal user