On a tracker with a multiselect box field that cannot be submitted (only read/updated), the creation of the artifact is blocked with message
You are not allowed to update the field XXXX
It's "unique" to multiselect box fields due to the fact that internally it "adds" a fake 100 value in this case. There is a chick-egg problem between
\Tracker_FormElement_Field_MultiSelectbox::augmentDataFromRequest and \Tracker_FormElement_Field::validateFieldWithPermissionsAndRequiredStatus due to that.
Seems to be there since 2015... (tested at least with 11.0 and 11.3)