if a user of type "zabbix user" requests dashboard widget "discovery status", two things happen.

1. the user gets discovery status information - probably permissions are not properly checked in api ?
2. Undefined index: editable[/usr/local/apache2/htdocs/trunk/api/classes/class.cdrule.php:88]
Undefined index: editable[/usr/local/apache2/htdocs/trunk/api/classes/class.cdrule.php:90]