Privilege Escalation

django-jet does not properly check user permissions. It allows users without permission to access modellookupview when using RelatedFieldAjaxListFilter...