A User with Fragment View Permissions but no Configure Permissions Can Propagate its Changes

• Type: Regression Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: Master
• Fix Version/s: 7.1.0 Beta 3, 7.1.X, Master
• Component/s: Fragment Administration
• Labels: None
• Fix Priority: 4
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/59630

Description
Although View usages should be permitted for a user with fragment view permissions, they should not be given option to propagate changes

Steps to Reproduce

1. Create a Fragment Collection and Fragment
2. Create a Page Template with your Fragment
3. Update Fragment
4. Create new Role
5. Give User the Permissions to Access Fragment 'Application' and View Fragments
6. Login as the User
7. Navigate to Site Admin > Build > Page Fragments
8. Click on View Usages

Expected Result
Propagating Changes is invisible
Actual Result
Propagating Changes is Visible and Useable for User with no Edit Permissions

Reproduced on: Tomcat 9.0.6 + MySQL 5.7
Portal master GIT ID: 3c134690d502331e61f7de173c1fd0b534c4ba7e