auto_author gives permission to everybody???
data['permissions'] += permissions.AnonymousReadOnly.author_perms
There's no check if user is author.
data['permissions'] += permissions.AnonymousReadOnly.author_perms
There's no check if user is author.