If you don't have any permissions and you're not a curator of a collection shouldn't you get a 403 here? I don't think we should expose our admin/carrier emails/display names.