Shopify: Staff without Manage Themes permissions can update themes

Vulnerability description not provided...