Checkboxes don't properly reflect authorisation constraints

Run as Maintainer and access the security subsystem. The "deep copy subject" attribute is not accessible in read-mode, but grants modifications in write mode of the form.