A user with the following privileges:   is able to enter the "Configuration" tab and can also edit the maps to which access was granted. I think it should be possible to create users that only have view permissions and cannot edit something.