Unauthorised users able to create replicas

Unauthorised users able to create replicas. They are not listed in the create replicas field of the server document, yet still able to create replicas on the server. Try it…