[Bug 553709] Administrator plugin doesn't check permissions before call of rest-service