Privilege Escalation

plone.restapi is vulnerable to privilege escalation. The vulnerability exists as DeserializeFromJson does not properly delegate the allowed user roles...