bug Dashboard Viewer role too permissive

[Gareth Cantrell]

I have given a few users the "Dashboard Viewer" role, however in doing so, this allows them to view External Guest access (contacts and companies) but even more problematic, it allows anyone with the role to make and save changes to ALL the working time calendars!

I don't believe having the ability to view a dashboard should automatically grant you permissions to change WTCs, as this could have a severe impact on system functionality, as we rely on these for SLAs as well as other critical date functions in various workflows.

The below screenshot shows the "Platform Configuration" menu as soon as the "Dashboard Viewer" role is granted - without this role, only "My Personal Settings" is visible from the settings menu.