SYMPTOM:
Users whose writing permission is denied at the folder's object-level Access Control List (ACL) are still able to save objects in the folder. Their permissions are set, as shown below:

CAUSE:
This issue occurs because the security role assigned to the user or user group has the "Bypass all object security access checks" privilege checked, as shown below:

ACTION:
Edit the security role and remove the "Bypass all object security access checks" privilege. Ensure that all of the inherited security roles are checked, as well.
9257