Bypass restriction REST API at [Xporter] Leads to Leaks Xporter Project Settings by any user

The rest API: /rest/jiraxporter/1.0/setting/project/<ProjectID>/enabled} return 200 if the project is enable or 406 if it's disabled.