The Locator Dialog allows to create locators (via the "Create New Record" flag) to anybody, it doesn't check for warehouse window permissions or for table M_Locator permissions.
There must be a configurable way to forbid roles to create locators on this window.
reproduced by Anton Mostovenko.
Steps to reproduce:
Create or find a User without access to “Warehouse & Locator” Window
Log in under that User
Open any window with “Locator” field (“Inventory Move” for instance)
Click on button in “Locator” field
Mark “Create New Record” flag
Click “Ok” button