Remove button from Security Groups subpanels is hidden or not based on ListView permissions instead of EditView permissions

[SinergiaCRM]

Issue

Depending on the pemissions given to a regular user (non administrator) can not remove a security group from a record (Contacts, Accounts...) from the subpanel on that record but from the bulk action on list view. This behavior is not consistent. Inspecting the code we found that it was being used permission on list view instead of edit view to control the appearance of that button on subpanels.

Possible Fix

No response

Steps to Reproduce the Issue

1.Create a user U1
2.Create a security group SG1
3.Create a Role R1 and assign group permission on every action of every module
4.Assign SG1 and R1 to U1
5.Login with user U1 and check that it can not see the remove button on the subpanels
6.Change permissions for R1 on Edit Security Groups and set "Not established". Check that the button is still hidden
7. Change permission for R1 on List Security Groups and check that now the button is shown.

Context

No response

Version

7.14.4

What browser are you currently using?

Chrome

Browser Version

No response

Environment Information

MAriaDB, PHP 7.4

Operating System and Version

Debian