Ooops. Added missing access control to changeset controller.