add right to allow readonly users