Read-Only role allows editing template

Description

An API request to edit a template will succeed even if the user only has read-only permissions.

Environment

None
Done

Assignee

Greg Hart

Reporter

Greg Hart

Labels

None

Reviewer

None

Story point estimate

None

Sprint

None

Fix versions

Priority

Medium