View only users can create recurring transactions

I have given my auditors view only access to purchase invoices and they were able to create purchase invoices from recurring invoice.

I think this might be a bug.

Fixed in the latest version (21.1.16)