5.1 Security Considerations for Implementers

It is recommended that the server perform access checking to verify that a client is allowed to perform the operation requested.