def IsAllowed(self, action, unused_user):
    if action in (crud_model.Actions.READ, crud_model.Actions.QUERY):
      return True
    return users.is_current_user_admin()
Anyone can read and query, but only admins can write.
dataset/ETHPy150Open GoogleCloudPlatform/Data-Pipeline/app/src/model/appconfig.py/AppConfig.IsAllowed