Maybe I misunderstood your original question. For clients I would use one of the predefined roles of Website Viewer or Website Commenter . Both don’t allow any editing, the latter enables to comment.
