Why check for admin when change_submission permission allows seeing the source either way?

Also checked for auth in submission cache.