The instruction adds read and edit permission for requests coming from 127.0.0.1. The read permission is obvious, but why edit? VisualEditor seems to work even without this permission, am I missing something? A testcase that breaks without the edit permission would be nice to see.
