IdStory Identity Manager

1. create new projection
2. add identity EAV attribute to projection
3. add validation to this EAV attribute
4. save projection
5. create new user with this projection
6. create new role with permissions:
   • IdmFormAttribute autocomplete BasePermissionEvaluator
   • IdmFormDefinition autocomplete BasePermissionEvaluator
   • IdmIdentityContractFormValue read,count,autocomplete IdentityContractFormValueEvaluator for default definition
   • IdmIdentityFormValue read,count,autocomplete IdentityFormValueEvaluator for default definition
   • IdmIdentity read,count,autocomplete IdentityByFormProjectionEvaluator for this new projection
   • IdmIdentityContract read,count,autocomplete IdentityContractByIdentityEvaluator COUNT,READ,AUTOCOMPLETE
   • IdmTreeNode autocomplete BasePermissionEvaluator
   • IdmTreeType autocomplete BasePermissionEvaluator
7. add this role to some user with no other permissions in IdM besides userRole
8. log in IdM and open projection form of a user with this new projection
   • the EAV attribute is editable
   • no save button is available
9. go to full detail of this user and EAV tab "More information"
   • the EAV attribute is editable
   • save button is present
10. click on save button
11. error message appears due to insufficient rights.

In this situation the user has to rights to edit anything on user with this projection so I would expect the field with the EAV to by disabled/not editable. When the EAV has no validation set and are present in the projection form, they are disabled.