HTML5/D3: Limit read-only privs to read-only activities #121