Could a "View Only" option be added to specific roles? For example, some Back Office employees might need access to information in the Quality Document Management folders but they would only be allowed to view or download files and not add their own. Or someone could have a better view of purchase orders in the Back Office and can look at the information but not be allowed to change/delete anything.
