permission issues for cq:annotations

Hi There,

I am trying to set modify permission for cq:annotation while I am having read permissions set for the page.

            - path: /content/geometrixx/${locale}

              permission: allow

              actions: read

            - path: /content/geometrixx/${locale}

              permission: allow

              privileges: rep:write

              restrictions:

                rep:glob: '*/cq:annotations/*'

              keepOrder: true

but since I have set read permissions, it is not allowing to create annotation. Is there anything I am missing in this or one of the limitation of AEM