ACL picker: please grey-out unavailable options - a read-only user can grant to himself or other some write or admin permissions without any warning or errors. nothing finally saved in DB

There are no consistency checks in the new ACL picker. A read-only user on a content object can modify permissions in the UI.

So for instance in the file manager, a john user with read-only permissions can modify ACL on a file or directory, save it (and it looks like being saved in the engines when toggling between tab). But when clising the file manager and reopening it, nothing was really save.

Quite confusing.