I'm struggling to get my head around how to do something, with the added complication of that fact I don't actually know that is actually possible.
I am setting up a Document Library to contain Project information. Each Project is represented by a custom Document Set in the root of the Library with Project Files to be stored as different content types within each Project Document Set.
Essentially I would like to achieve the following for a user/group accessing the Document Library.
The Root of the Document Library is Read-only - this way the user can not create new projects (I have CSOM code for this) , they can not edit the meta-data on the project nor delete it. Essentially they see a read-only list of existing Projects.
However when they drill into an individual Project they should be able to Contribute documents to the Project as they wish (so add/edit/delete etc.)
I have some CSOM code which creates the Document Set but whatever I try I can't seem to achieve both 1 and 2 at the same time either through breaking permissions in the code or adjusting permissions in Sharepoint (Online btw).
As I say - I don't even know if this is possible? Any help, advice or alternative suggestions much appreciated.