If a user creates a paperformat, he should be able to modify it too. Employees have no reason to modify the paperformat though (nor create). Having a malicious employee modifying an existing report may be dangerous. [CLA] signature for stijnh92 Fixes #26292 closes odoo/odoo#27444