Currently the CMS-REST-api - if enabled - if available without login. Anonymous users may see date you typically don't want.

We now restricted the access to AUTHORs.