Users, while trying to move cards from one lane to another, getting Error "You do not have the permission to modify this record" even though users have write access to the table.

When analysed the session logs, below were observed:

12.04.53 AM.417: VTB Service Error - 1006, Insufficient Permissions

log12.04.53 AM.418: #1919991 [REST API] RESTAPIProcessor : Insufficient Permissions
log12.04.53 AM.419: *** End #1919991 /api/now/v1/vtb/cards/<CARD_SYS_ID>, user: schugh, total time: 0:00:00.518, processing time: 0:00:00.518, SQL time: 0:00:00.013 (count: 29), business rule: 0:00:00.007 (count: 2), ACL time: 0:00:00.439, source: 144.2.237.0 , type:rest, method:PUT, api_name:now/vtb, resource:now/v1/vtb/cards/{cardId}, version:v1, user_id:<USER_SYS_ID>, response_status:403

The State field on the actual table (say VTB was built on sc_task table) record was read-only at the dictionary level. Hence when the customer was trying to move the card, it was violating the ACL that makes the field Read-only. The main issue is now resolved, which was caused by the dictionary Read-only checkbox ticked for the state field.

Customer needs to uncheck the read-only field on the state field at dictionary.