[DO NOT MERGE] 575 readonly user perms

@pld here you go
is the `shared` namespace still being referenced anywhere?