EDUCATOR-4920 Control permission to REST endpoint CR1 EDUCATOR-4920 Control permission to REST endpoint CR1