added IsOwnerOrReadOnly permissions