pub fn require_writable(user: &Identity) -> Result<(), ApiError>
Fail if user is read-only. Admins can always modify, as they can change their read-only state anyway.
user