[DO NOT MERGE] 575 readonly user perms

@pld here you go
same thing as above w/the perms name collision