[TOM-316] add read-only permissions

Merged Joel Maglioni requested to merge TOM-316 into 15.0-stage

Closes TOM-316

Merge request reports