delete and change privacy not allowed for users with only read access