Separate reading and writing permissions

[Scott]

This. 1,000,000%.

Additional privacy role actions

I would like to ability to restrict the creation, modification, and deletion of objects and their fields in the data privacy tab. Use case: some users should only be able to create/edit an object of a class while a different subset may only view that same object of the same class. This will add an extra layer of security preventing accidental modifications on objects already viewable to the user.