if they don't have update, they still need read to access the page!