How did one of my users create a data model even though they have only a user role?

[lycollicott]

He created the model under the search app, so I verified that he does not have write access to that app either.
I even logged on as him to test it and I could not create one, so how did he do it?

[ikislukhin_splu · Accepted solution]

The only scenario I am thinking of is - opening a non-transforming search in Pivot page: http://docs.splunk.com/Documentation/Splunk/6.4.0/Search/OpeninPivot, and after saving results as a Report or Dashboard Panel along with creation of a Data Model.