Share read only issue

I have set up a “share” to be read-only for a particular “user”, however, when I went to access the mycloud via their log in I could edit/delete everything…any advice?