[DO NOT MERGE] 575 readonly user perms

@pld here you go
to affect here and lines 148-151, 225-228