only admins can save/update controllers
diff --git a/planetstack/core/models/site.py b/planetstack/core/models/site.py
index 4b42815..67b77f5 100644
--- a/planetstack/core/models/site.py
+++ b/planetstack/core/models/site.py
@@ -278,6 +278,13 @@
 
     def __unicode__(self):  return u'%s %s %s' % (self.name, self.backend_type, self.version)
 
+    def can_update(self, user):
+        if user.is_readonly:
+            return False
+        if user.is_admin:
+            return True
+        return False
+
 class SiteDeployment(PlCoreBase):
     objects = ControllerLinkManager()
     deleted_objects = ControllerLinkDeletionManager()