Api4 AJAX endpoint: change required permission to access AJAX API.

[mlutfy]

Overview

As an anonymous user, it's not possible to use the API4 AJAX endpoint.

(I'm working on an extension which implements its own API4 entity that is accessible to anonymous users.)

Before

HTTP request to the ajax api4 endpoint return an Authorization Denied.

After

HTTP request to the ajax api4 endpoint respects the permissions of the entity.

cc @colemanw

[civibot]

(Standard links)

• If this is your first pull-request for CiviCRM, please browse CONTRIBUTING.md for information about the development and testing processes.
• If you are reviewing this pull-request, you may wish to consult the test sites and the Review Standards (long template, short template).

[colemanw]

Makes sense to me.

[agh1]

I'm super late to the game but wouldn't this be access CiviCRM;access AJAX API like

civicrm-core/CRM/Core/xml/Menu/Misc.xml

Line 111 in f96eb23

<access_arguments>access CiviCRM;access AJAX API</access_arguments>

Many users will have access CiviCRM but not access AJAX API.

[agh1]

I opened a PR in #17241 to make the above change.