Answer
Treat this as expected client behavior rather than a permissions bug — some Aurena screens enforce a read-only grant at save time rather than by proactively disabling or hiding the action buttons, so a user can still open an add/edit action and enter data before being blocked at the point of committing it.