is there a way to disable the ability of a contact (that has access to the site) to place orders but they can only login and see invoices, statements etc. in the customer center?

No