Project: duracloud
Issue DURACLOUD-707: Secondary storage providers should be Read-only via the Rest Api
As the synchronization of content between storage providers becomes automated (DURACLOUD-642), it becomes unnecessary for users to edit content in their secondary provider. In order to maintain an assurance that content remains consistent between providers, the ability for users to make changes at their secondary storage provider should be removed. They would still be able to view and download all content, but no add/update/delete operations would be allowed. This task is to update the REST API to ensure that users with role user/admin/owner do not have write access to secondary stores.
Story points: 3