...
A dynamic authentication via API is not implemented yet. Therefore API calls which do not provide an authenticated browser session to translate5 must have the needed rights for the role noRights in "noRights" in the table Zf_acl_rules of translate5.
...