I made a privilege set that does not allow new or delete records. Then I added a script to hide the tools/status bar (they shouldn't need that). That should be enough.