Sure, I understand, that’s why I asked if it is intended or just oversight so I can properly update code 
Edit: Also generally if you give some user some permissions, it is carried across all usage independent on API, UI or whatever so you have consistency unless you can set API access independently. But that’s just my opinion, nothing else.
Just want to know what is correct approach to this change.