May affect custom code - put 4.3 check_permissions behaviour into 4.2

note that this will make the api more secure but is a higher risk back which could affect custom code as it will raise the level of permission required for some api actions