Readonly user should not read + write security settings

1. Configure CB Server with LDAP and create a user in LDAP.
2., From Security tab, give user in 1 as 'Read Only Admin' role.
3. Login as user in 1

Actual Result:
a) Read Only Admin is able to see the Security Tab
b) Read Only Admin can write to security settings.

expected result:
Read only admin should not be able to the Security tab as well as act on any of the security settings.