How do I setup anonymous access but disallow the right to create or edit, we want the ability to have read only access to users who are not logged in and no rights to edit.
In the global permissions, allow anonymous access.
In each space permission, allow anonymous "use" but not "create/edit" - you'll be able to see how it works just by looking at the space permission page.
It looks like you're new here. Sign in or register to get started.