Check write in Data Import start_import and User Invitation resend_invite

Data Import start and User Invitation resend now check write permission on the document themselves, so a read-only user can no longer trigger them through the generic method endpoint.