Bug 16497: (follow-up) GET operations require staff access