URI modification allows users with access rights ability to clone