If an attribute is a multilingual attribute and has a value, the "Edit translation" icon is active. Even if the user has no edit permissions on the attribute they can click the "Edit translation" icon, change the values and save the values, e.g.:
Permissions are currently not taken into account for translation fields.
The user gets the permissions via the permission group QBM_Baseright. Every user is assigned this permission group, so every user can change translations.
An enhancement request (#29416) has been created. The product team will evaluate the request and this feature may become available in a future release of the product.