Hi, Yes you have that out of the box. No need to do anything. A normal user cannot edit. That screenshot looks to be from a developer with elevated privileges to edit. If you sign in as a consumer then your user does NOT have the option in this list of values to edit report or edit layout. But a consumer does get the options to Export, Schedule etc. If you sign in as an author you get all the options including Edit. That is the desired behaviour. You want your authors to be able to edit. You want your consumers not to be able to do so. And if you make the file read only in the catalog then author will be unable to save any edits on that file.

With out of the box privileges this is what your normal users who are consumers get. Read only, no edit.