Also, users who do not have “manage device” permission are able to drag and drop device groups around in the tree. They get a confirmation dialog asking to save it, which they can click the save button. However, it eventually gives an access denied message (whew!).
However, this has become a usability issue for some users who slightly move their mouse when operating the mouse button. The group starts to move (blue outline around the group), then it drops back in its original position. Unfortunately, the user doesn’t realize that a move group action was initiated then aborted. Instead, they think that the resource group tree is unresponsive.
Users who do not have “manage device” permission shouldn’t even be able to initiate the group move operation.