Currently, there's an object in the Role Groups called "Cell Data Excel" that allows to define independent writeback rights in Jedox Web & Excel. E.g., a user could writeback from a Web Report but not from Excel, however, this function is not known by many users and it would be good to have it available in Excel settings so the end user could also decide to have it off and so prevent undesired changes in the database.
As a default for future users/roles, the setting could be turned off. This way, it is secure that nobody, who doesn't want to change data, won't. Only, if people consioulsy want to edit data, they would go and activate the setting.