A user is able to save over Read-Only fields that were previously updated by a process.
Steps to reproduce
Expected Result: You should get error like "Attribute is not editable" because attribute my_string is a Read-Only field
Actual Result: You were able to Save over Read-Only field.
This applies to any PPM release.
This was originally reported as internal issue CLRT-81693 and determined that this is not a bug.
By design, Read-Only attributes stop the user from updating the values from UI. In this case, when the process executes, the updates are made in the database directly hence the values are being updated on the UI as well. When the page is saved again, the values contained in the UI are saved back to the system.