[Bug 553709] New: Administrator plugin doesn't check permissions before call of rest-service