0017920: Security hole: Any user can get and set variables in any case with REST GET/PUT /cases/{app_uid}/variables