Block settings import in read_only mode

lib/flipper/ui/actions/import.rb

@@ -8,6 +8,7 @@ class Import < UI::Action
         route %r{\A/settings\/import/?\Z}
 
         def post
+          render_read_only if read_only?
           contents = params['file'][:tempfile].read
           export = Flipper::Exporters::Json::Export.new(contents: contents)
           flipper.import(export)

lib/flipper/ui/views/settings.erb

@@ -2,6 +2,7 @@
   <div class="alert alert-danger"><%= params["error"] %></div>
 <% end %>
 
+<% if write_allowed? %>
 <div class="card mb-4">
   <div class="card-header">
     <h4 class="m-0">Migrate to Flipper Cloud</h4>
@@ -24,6 +25,7 @@
     </form>
   </div>
 </div>
+<% end %>
 
 <div class="card mb-4 ">
   <div class="card-header">
@@ -38,6 +40,7 @@
   </div>
 </div>
 
+<% if write_allowed? %>
 <div class="card">
   <div class="card-header">
     <h4 class="m-0">Import</h4>
@@ -51,3 +54,4 @@
     </form>
   </div>
 </div>
+<% end %>

spec/flipper/ui/actions/import_spec.rb

@@ -37,5 +37,26 @@
       expect(last_response.status).to be(302)
       expect(last_response.headers['location']).to eq('/features')
     end
+
+    context "when in read only mode" do
+      before do
+        allow(flipper).to receive(:read_only?) { true }
+
+        post '/settings/import',
+          {
+            'authenticity_token' => token,
+            'file' => Rack::Test::UploadedFile.new(path, "application/json"),
+          },
+          'rack.session' => session
+      end
+
+      it 'returns 403' do
+        expect(last_response.status).to be(403)
+      end
+
+      it 'renders read only template' do
+        expect(last_response.body).to include('read only')
+      end
+    end
   end
 end