By "read only" user I assume you mean that the user has the vSphere read-only permission set on all objects. This can only be determined by calling the vSphere API in the java layer (using the current usersession) Sorry, we don't have any sample code using the vSphere permission API. May be the vSphere Management API forum can help you.