Permissions with faulty effect
I only set "Create Events/Collections" permission for all users on a resource. With this set, all users get full access to the resource and can also change permissions. The same happens when I only set "Delete Events/Collections", "Write Metadata" or "Write Data".
I don't think, that this is a correct behavior. I'm running v18.104.22.168