User wants to disable adding volume for a vm, this works for adding blank disk but failed for adding an existing volume.

1.Create a user user1 and assign user1 to clusterrole kubevirt.io:admin in namespace vm-app
2.login with user1, admin console > virtualization > virtuemacines > your vm > configuration > storage > add disk > empty disk > save
3.An error occurreddatavolumes.cdi.kubevirt.io
 is forbidden: User "user10" cannot create resource "datavolumes" in API
 group "cdi.kubevirt.io" in the namespace "vm-app" 
4.The above behavior is expected because user1 should not be able to add volume.
5.From add disk > volume > save, there is no error displayed, this is not expected, the same forbitten message should be displayed.

No error message displayed

after checking with Ronen And Ugo: the demand is Only for cd rom we need the user to have permissions to create data 
For others If the user do not have permission to edit the vm, the user cannot do anything in this menu it should be disabled