API calls don't check User Rights

[ajperdew]

We have found that having an API token allows the import and export of all the data resolution data without accounting for import/export rights, data resolution rights, etc. in the REDCap permissions

[jubilee2]

https://github.com/vanderbilt-redcap/data_quality_api/blob/master/export.php#L4
I believed related with this line.