Allow report building on published datasets but not allow to change the data model

Today when we publish a dataset and let it be open for users to connect to and build reports on, they automatically gets access to change the datamodel in the published dataset. That means they can wipe out any Row Level Security we've applied to the dataset. This renders RLS only efficient for consumers of reports, and useless to maintain security/data limitations for report builders.

We need to be able to publish datasets for report builders where they can connect to them and build new reports/visualizations on them, but not let them alter the published datamodel.

The data set should be possible to publish as a "blackbox", users should be able to connect to them and on report level add and merge new datasources sharing any dimension in the published dataset, but they should not be able to alter the published dataset.