The zone websocket handler doesn't define create permissions (nor it uses a form), so no permission checks are performed.
The zone websocket handler doesn't define create permissions (nor it uses a form), so no permission checks are performed.