Returning a 401 if user want to modify metadata but has not a change_resourcebase_metadata permission