I think I’ve hit a permissions hole: as a regular authenticated user with no AddContent rights on a target…

I think I’ve hit a permissions hole: as a regular authenticated user with no AddContent rights on a target…: a task in MiMo-V2.6-RL-harbor-code: MiMo-V2.6-RL Code (Harbor) (Harbor dataset). Expected outcomes: - POST .../@duplicate must not allow a request body value such as "check permission"…

The task

Expected outcomes: - `POST .../@duplicate` must not allow a request body value such as `"check_permission": false` to bypass the target container’s content-add permission requirements. A user without permission to add content at the requested destination should receive a permission/client error, and the destination…

Part of FineEnvs/MiMo-V2.6-RL-harbor-code.