Once a chart or dashboard is shared, any non-admin can rename, edit, or trash it — including assets they don't own. Enforce creator-level protection: a non-admin can only modify/delete an asset if their User ID matches the owner attribute. Non-owners get read-only; edit/rename/delete raises access-denied.