Limiting API to "Read Only" access
We are working on a broad data retention project where we need to generate an API Client that only has "Read-only" or rather "Get" access. The basic goal is to provide the developer the ability to create a script to access the system and simply retrieve content. We do not want to provide the developer the ability to "Put" and/or "Delete" any content. What would be the best manner to achieve this?