Visma Bug Bounty Program: A 'Read only' user can modify the company logotype and invoice background image

A ‘Read only’ user can modify the company logotype and invoice background image in his own company, which should not be allowed for this permission level.