Using the /api/post/upload endpoint with master token ignores the _uid param

[Andrei Lopatenco]

Using the /api/post/upload endpoint with master token ignores the _uid param as it replies with

{
  "status": {
    "code": "forbidden",
    "message": "[[error:no-privileges]]"
  },
  "response": {}
}

I have edited the privileges to allow guests to upload and this and immediately worked so I guess the /api/post/upload endpoint simply ignores the _uid param? Or do I need to send it somehow specifically?

[DO MGBK]

I am seeing similar behavior too for read API (for example get user by email api), master token and _uid are ignored when sending request. The document states that master token can be used, however it doesn't seem to be the case for all APIs.