NEVER give the client write access to anything, it will be abused by exploiters! DataStore writing should only be controlled by the server.
In all, I feel like your trying to reinvent the wheel here. ProfileService and ReplicaService are both great modules that were designed to work together to give you secure datastoring and easy dynamic read access to clients; both of which fit your needs here.