We've setup a Organization Asset Library for our company Office templates. Our marketing consultant have the permissions to change the template files in the library, but for all other members the permissions are set as Read.
We do want the Asset Library be available on read-only base just to check and search for templates/names in from Teams. When a Read user is now opening the file from the Teams explorer or in the browser, the read-only permissions are present. The user is not able to edit and save the template document.
When a Read user is opening the template file in a desktop app though, the Read user is able to edit and save the template file. This behavior we don't want and don't expect (because it's a read-only user).
How can we prevent that users with read permissions can edit template files?