I noticed an serious bug in versions 5.0.9 and 5.0.10.. If you login
with read-only account you can still delete fw policies. At least this
works with 5001B blades.
Personally I think that forcing to have a training for Fortimanager and
Fortianalyzer is really stupid. They are separate products and should
not be part of the whole certification path. Not everybody needs or even
wants to use these devices/software...