Users can edit the translations of an attribute even if no 'edit' permission has been granted on the attribute (4321265)

If an attribute is a multilingual attribute and has a value, the "Edit translation" icon is active.  Even if the user has no edit permissions on the attribute they can click the "Edit translation" icon, change the values and save the values, e.g.:

Permissions are currently not taken into account for translation fields.

The user gets the permissions via the permission group QBM_Baseright.  Every user is assigned this permission group, so every user can change translations.

WORKAROUND

None

STATUS

An enhancement request (#29416) has been created. The product team will evaluate the request and this feature may become available in a future release of the product.