Discussion posts and replies are publicly visible
OK. Do you want to share any additional details or context?
I see that you seem to hit an endpoint that is meant to be called by a user's browser, or your authentication is somehow invalid.