UDF uses "Content/Create" policy restrictions in Online Editor. This makes it impossible for editors to link the content which they have read (but not edit) access to.

Steps to reproduce:

1. Install clean eZ Platform 3.1.0.
2. Remove default "Content/all functions" security policy for Editor role.
3. Add Content/Read (no limitations) policy to the Editor role.
4. Add Content/Create (Content Type: Article) policy to the Editor role.
5. Create a test Editor user.
6. As an Administrator user create "Test Folder" [Folder] and "Test Article" [Article] content.
7. Logout from admin UI.
8. Login as test Editor user.
9. Create new "Test Article 2" [Article] content.
10. Try to link "Test Folder" content in the "Intro" field of the new article.

Expected result:

The editor should be able to link the content (using UDF) which he/she has read access to.

Actual result:

The editor is able to link only the content types which he/she is allowed to create. So the editor could link an Articles, but not the Folders.

PR is on its way.