Ad hoc read only user role still allowing data submission, why?

Content

I'm trying to prevent users from submitting data in situations where a form is opened in SV then user clicks "Analyze".  The user in question is assigned "User" role in identity services then I grant the user "Adhoc read only user" role in Access Control.  User is still able to submit in ad hoc mode.  Am I missing a step here?  The user has no other competing permissions or roles.

 

Thanks