DSA-2568 rtfm - privilege escalation

It was discovered that RTFM, the FAQ manager for Request Tracker,
allows authenticated users to create articles in any class.