[MAYBE MERGE] 575 readonly user perms

@pld here you go