Problem: the end-user belongs to a group that does not have rights for splashing, but the right-click in jedox web on an opened cell (where you can enter values via palo.data) always shows the splashing assistant.
And the user is able to define some splashing. The rights only stops the user when trying to commit the splashing.
Suggestion: Hide context menu items with respect to the user rights (resp. group rights) because in general you dont want the user to see that there even is something called "splashing" or "drill through".
Pictures show an example (user with group right "N" on drill trough an splashing)