Limit ability to alter datasets except through datastore.Service