Endpoints available for normal members

Question

The following endpoints are available for normal members, even if (if possible) the access is restricted from the role settings: /cms/active-users/transactionsThis maybe bug or work as it should?