In detail, this means that these users can take this action, provided they pass all of the checks described above first:
Note: This object has a less restrictive policy ("Public") than the default policy for similar objects (which is "Repository Author").