user with no write permissions can no longer change a checkbox state