for the openAPI implementation, can i check if edit ACL policies are checked for update operations, similar to the GraphQL API? i know the REST endpoint and the kafka sink does not.