L3 - Default Description
Reproduce:
- Be a Viewer of a collection
- use the rest api to edit an existing alert
Expected:
- The backend prevents the changes
Observed:
- Changes are persisted
Context:
When refactoring the EntityList, we accidentally allowed Viewers to edit the Alerts. They were able to save the changes, which should have been prevented by the backend. We fixed it in the frontend, but it should still be possible to edit an alert as viewer via the rest api. Maybe this also affects creation and deletion of alerts