Description of problem: Read-only admin user can approve subscription Version-Release number of selected component (if applicable): How reproducible: always Steps to Reproduce: 1.Prepare a read-only admin user to login registration, enter admin panel->coupon 2.create/delete a coupon 3. Actual results: Read-only admin user can create/delete coupons Expected results: Read-only admin user can not access any update method on coupons Additional info:
Fixed in STG