User read only role/permission for space

Ability where we want to grant readonly permission to user for a space. And any images uploaded to that space , user should be able to just pull the image , but shouldn't be able to push or delete.

Currently Auditor role says its readonly , but using using docker command line we were able to push and delete an image for user who has Auditor permission for the space. Not sure if its expected behaviour or an issue?