incorrect security check in export restlet when Anonymous is enabled

Once authenticated, users that have no rights to access the exported root document get access to the content.

This can be put easily in evidence by

• creating a document note using the administrator account
• exporting the document note using an anonymous access