Error in checking permissions
There is an error in checking permissions in the file interface/lib/classes/tform_actions.inc.php
In functions "onPrintForm", "onMailSendForm" and "onShowEdit" it says something like
sql = "SELECT * FROM ".
app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id." AND ".$app->tform->getAuthSQL('u');
(sample from onShowEdit - line 530)
I think it should be
sql = "SELECT * FROM ".
app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id." AND ".$app->tform->getAuthSQL('r');
(checking for "read" permission, not for "update")