ANOTHER thing I noticed is that the ReadOnly user status has the ability to click and execute "Remove Site" from the Sites tab.
Obviously they cannot click Deploy , so The result is that they force the real admin to restore a snapshot, but you must admit that it's strange that they allow ReadOnly to click this at all.
I wonder, Is there a separate CSC # for this "bug" as well?