Read-only user can delete fields in Data Object

1. Login as admin
2. Edit "analyst" role to be read-only for "Projects" (See permissions.png)
3. Import "mortgages" sample
4. Login as analyst
5. Access to "Applicant" Data Object
6. "Save"/"Delete"/"Rename"/"Copy" buttons are not displayed. (good!)
7. But "Delete" button for each field is displayed. (See DataObjects.png) (not good)
8. You can delete these fields. "Source" tab also reflects the deletion. (not good)
9. As there is no "Save" button, you don't break the asset anyway. (good!)
10. If you close the editor, pop-up says "Are you sure you want to discard unsaved data?" (See popup.png). (not good)

Actually, it' doesn't break the asset so I file this JIRA with "Minor" priority. But it's not good from UI/UX perspective.