Looks like DataCube dataset status changing function was available to anonymous users :(