[DO NOT MERGE] 575 readonly user perms

@pld here you go... about to relocate