You would give them read only permissions in the User Permissions Feautre Access configuration.
- Stinney
"Scire ubi aliquid invenire possis, ea demum maxima pars eruditionis est"
"To know where to find anything is, after all, the greatest part of education"