Add read-only user role

[sman591]

It was discussed at today's marketing meeting to add a read-only user role simply to avoid any possible issues with unauthorized or untraceable changes.

[sman591]

Closed in #144