Bugfix in the API permission code.