Very extensive permissions needed for getting participant via API

When you try to get a partiticipant via API

civicrm_api('Participant', 'get', 
   array(
      'version' => 3,
      'sequential' => 1,
      'contact_id' => $contact_id,
      'event_id' => $event_id
   )
);

you recieve a permission error

API permission check failed for Event/get call; insufficient permission: require access CiviCRM and access CiviEvent and view event info

if you don't have allowed unauthorized users to access CiviCRM ("Master control for access to the main CiviCRM backend and API") and CiviEvent ("Create events, view all events, and view participant records (for visible contacts)").

Even 'check_permissions' => FALSE results the same error.

I think those permissions are way to extensive, just to get some info about a participant. And in 4.7.14 I did not have this issue. So I guess something is wrong with the permission check.