Anonymous user has read access via REST API for nonexistent/empty locations that it should [RTFACT-22282]