I have a user that has only the single right "Job: read", but is still allowed to change the description of the server (main heading) for everyone.

Could be reproduced:

• log on as this user
  • main page shows up, but no link to change the description)
• click on "my views"
  • this will open the URL https://SERVERNAME/me/my-views
  • which is redirected to https://SERVERNAME/me/my-views/view/Alle/
  • On this page the global server description is writeable

This could also be tested by directly opening the URL:
https://SERVERNAME/me/my-views/editDescription