Group UI allows you to attempt modifying membership even when group is read only

2014-02-26 22:25:16,122 WARN  [http-bio-9080-exec-14599] sruiz 1345x4793954x7 poi1sl 203.174.172.234,172.24.36.105,127.0.0.1 "POST /admin/groups/remove-user HTTP/1.1" c.a.stash.internal.crowd.RiotPolice Could not remove jcreenaune from atlassian-connect
com.atlassian.crowd.exception.OperationNotPermittedException: com.atlassian.crowd.exception.ApplicationPermissionException: Application "crowd-embedded" does not allow group modifications
        at com.atlassian.crowd.embedded.core.CrowdServiceImpl.removeUserFromGroup(CrowdServiceImpl.java:788) ~[embedded-crowd-core-2.7.2-rc2.jar:na]
        at com.sun.proxy.$Proxy136.removeUserFromGroup(Unknown Source) ~[na:na]
        at com.atlassian.stash.internal.crowd.RiotPolice$12.execute(RiotPolice.java:490) [stash-service-impl-2.11.0-rc11.jar:na]
        at com.atlassian.stash.internal.crowd.RiotPolice$12.execute(RiotPolice.java:485) [stash-service-impl-2.11.0-rc11.jar:na]
        at com.atlassian.stash.internal.crowd.RiotPolice.execute(RiotPolice.java:695) ~[stash-service-impl-2.11.0-rc11.jar:na]
        at com.atlassian.stash.internal.crowd.RiotPolice.removeGroupMember(RiotPolice.java:485) ~[stash-service-impl-2.11.0-rc11.jar:na]
        at com.atlassian.stash.internal.user.DefaultUserAdminService.removeUserFromGroup(DefaultUserAdminService.java:384) ~[stash-service-impl-2.11.0-rc11.jar:na]
        at com.sun.proxy.$Proxy224.removeUserFromGroup(Unknown Source) ~[na:na]
        at com.sun.proxy.$Proxy287.removeUserFromGroup(Unknown Source) ~[na:na]
        at com.sun.proxy.$Proxy556.removeUserFromGroup(Unknown Source) ~[na:na]
        at com.atlassian.stash.internal.rest.user.UserAdminResource.removeUserFromGroup(UserAdminResource.java:718) ~[na:na]
        at com.atlassian.stash.internal.rest.user.UserAdminResource.removeUserFromGroup(UserAdminResource.java:676) ~[na:na]