Read-Only Access

Tester: “A read-only user can delete accounts.”

Developer: “Only by calling the endpoint directly.”

Tester: “The Delete button calls the endpoint directly.”

Defect reopened.