Author users without the roles [ServerModifier] can edit server document
An author field with the name "source" with the value "*" was existing in the server document, which means any Author can edit the document. Such field does not exist in the standard Server documents
Resolving the problem
1. Check in the Designer if the Server Form has been modified.
2. If yes, replace the design with the standard template, and edit and save the server document.
3. If the Server Form has not been modified, then check the server document access fields.
In General, following Author fields are found in Server Document:
DocumentAccess (AUTHORS) :
LocalAdmin (AUTHORS) :
Owner (AUTHORS) :
If any AUTHORS field other than above found, then that field could be the culprit. You can Delete the redundant Author fields. In one of the case, it was found that the field with name "Source' with value "*" allowed author users to edit the server documents.
Deleting the "source" field from server document resolved the issue.
Note: Make sure you have backup of names.nsf (Domino Directory), before making any changes.