User with ReadOnly permission can add permissions to other users for uploaded document

After adding read only permissions to a user in one domain, when we login with that user we can use the Nuxeo Upload with Aspera and upload a file to webui and give permissions to other users to see that document

How to reproduce:

• With Admin create 2 users and give Read Only permission to the 1st and ReadWrite to the 2nd in the Domain
• login with Read Only user
• go to Nuxeo Upload with Aspera
• upload a document adding the UserWorkspace as a Target Document
• edit the rest of the metadata
• add ReadWrite permission to the document for the 2nd created user
• complete transfer
• log out
• log in with the 2nd user
• look at the Recently Edited Dashboard(the created file from Read Only user is there)