Permission check not working for custom content when listing custom content via /wiki/rest/api/content

Issue Summary

Getting custom contents via GET /wiki/rest/api/content returns restricted ones.

Steps to Reproduce

1. Create custom content
2. Restrict the custom content to the author
3. List contents via GET /wiki/rest/api/content using a different user as the author

Expected Results

Restricted content does not show up.

Actual Results

Restricted content shows up in the list.

Notes

• Calling Get content by ID using a different user returns a 403 which is the expected behavior.

Workaround

Currently, there is no known workaround for this behavior. A workaround will be added here when available.