Currently, any user can modify any API Backend metadata record. Make sure that only authorized persons can modify metadata for API Backends: - Administrators - all metadata - Managers - metadata for managed APIs