MT#8561 API: filter write ops for r/o users