Limit access to mco shares to read only