ANOTHER thing I noticed is that the ReadOnly user status has the ability to click and execute "Remove Site" from the Sites tab. Obviously they cannot click Deploy , so The result is that they force the real admin to restore a snapshot, but you must ...