Hi, I am not sure, if it is intended, but if I protect a dashboard by making it non-editable in the settings, a user with a viewer role can still go to the settings and make the dashboard editable again. Tested on several systems (current configuration: Grafana 6.2.0 in Docker).
Is this a bug, or do I miss something?