If an attribute is a multilingual attribute and has a value, the "Edit translation" icon is active. Even if the user has no edit permissions on the attribute he or she can click the "Edit translation" icon, change the values and save the values, e.g.:
Permissions are currently not taken into account for translation fields.
The user gets the permissions by the permission group QBM_Baseright. Every user gets this permission group, so every user can change translations.
An enhancement request (#29416) has been created. The product team will evaluate the request and this feature may become available in a future release of the product.