Access control failure on /api/1/datasets/<id> and /api/1/reuses/<id>

[gpsilv4]

It was found that the application present at dados.gov.pt is not correctly validating user permissions.
It is possible for any unauthenticated user to view privately created data.

Page where the access control failure was identified:

• /api/1/datasets/
• /api/1/reuses/

Suggestion:
The application must validate the user's role/load and permissions and ensure that only those with the appropriate permissions access pages with sensitive content, such as customer information.