In #00005535 we added restrictions to CM-Neo resources as a security feature. This restrictions however has been too aggressive.
On effect has been that RTF links and images could not be created for foreign apps/databases.
We now restrict access if not in a content manager session. Inside a content manager session there are no restriction.