Email Button Read Only Link shows Actions and Buttons to read only user

I’m testing the Custom Email Button functions and noticed something that doesn’t make sense to me.

I created an button that send the user a read only link. When you click the link you see the read only record, but you also see the action panel in lower right corner and the button which the read only user shouldn’t see.

In this case my recipient user can resubmit the email action over and over. It this the intended function? Seems very strange to me to let the email recipient trigger actions.

I can answer my own question on this one. You can change the access level of an action button after you create it by going over to Form Settings>Actions. This is what I was expecting from Ragic, just didn’t see it during the button creation process, instead it is on the side panel.