There are various solutions.
The most involved is to set up Access security, and assign permission to
groups. Each user's group will then determine what permissions they have.
Advantages: True security, excellent granularity. Disadvantages: possibly
overkill for what you need.
The simplest is to create 2 copies of the front end (assuming you have split
the database so each user has their own copy of the MDE front end locally,
and the back end mdb is in a shared location.) Advantages: Easy to create
limited functionality. Disadvantage: 2 front ends to maintain.
Another option is to set the AllowEdits and AllowDeletions properties of
each form in its Open event, depending on the user. This means either
getting the user's name at startup, or using a specially formed command line
shortcut for the users who have full permission. Advantage: Very easy to
maintain. Disadvantage: Not really secure if you have savvy nosy users.