We took the opportunity of this bug to refactor serializers and permissions as advised one day by @qbey: no permission checks in serializers.
We took the opportunity of this bug to refactor serializers and permissions as advised one day by @qbey: no permission checks in serializers.