MDL-45303 Missing capabilities/permission checks