READ permission not checked for "relating association"
With a get-related call READ permission is checked for the related object, but not for the "relating association". This is a bug.
This is a follow-up of dmx-intern/sprint-planning#214
Thank you, @jpn for reporting!
@mukil FYI