Protest, yes they do have the right.
Attack, no they do not, and they can and likely will be held accountable for their actions. DDOS disruptions of a business web platform is against the laws of this democratic country.
Kinda like the difference between a protest, and a riot.