can't you just remove the permissions for those roles who shouldn't have edit ability? Set to create only.