Centrally reject any write-urls for r/o-users.

We currently filter for create/edit/delete in any part of the uri.