Azkaban permission problem

[llsXuemengran]

Azkaban version : 3.90.0
I configured a read-only role in azkaban's azkaban-users.xml file

<role name="reader" permissions="READ"/>

But when I log into azkaban with this user,

I found that this user can download, upload and delete project.

Obviously, these are the permissions that administrators should have, and should not appear on read-only users. Now this permission has brought us a lot of trouble, which means that any user who can access azkaban, regardless of their role, It can be deleted arbitrarily, uploading the zip package will pollute the project, causing production problems.
Excuse me, how to solve this problem