Read-only sharees should only be able to modify properties.

The previous ACL also allowed binding/unbinding which is dangerous.