Release Vehicles permission Add/Delete/Save toggle is OFF but parent permission "Release Vehicles" is ON; can change External Reference Link & Consolidate Release Vehicles

Issue Summary

If "Release Vehicles" permission Add/Delete/Save toggle is OFF but "Release Vehicles" parent permission is ON, then no changes should be able to be made.
Issue 1: External Reference Link can be added
Issue 2: Release Vehicles can be consolidated.

Steps to Reproduce

Conditions:
Set Role "read-only" permissions for Release Vehicles in
Administration | Roles | any role
Program | Manage | Releases
Release Vehicles - toggle is ON
Release Vehicles Add/Delete/Save - toggles are OFF

Issue 1: External Reference Link can be added

1. Navigate to the Release Vehicles Grid
   https://xyz.jiraalign.com/ReleaseVehicleGrid
   and choose a release to open details panel. Choose External References.
2. Populate Link Type, Link Name and External Link and select Add.

Issue 2: Release Vehicles can be consolidated.

1. Select More actions and user can Consolidate Release Vehicles

Expected Results

1. Link is not added.
2. Release Vehicles are not consolidated.

Actual Results

1. Link is added
2. Release Vehicles are consolidated.

Workaround

Currently there is no known workaround for this behavior. A workaround will be added here when available