[kovidgoyal]

You need to setup user accounts under preferences->sharing over the net, then you can assign libraries and even virtual libraries to each user account. And restrict user accounts from making any changes as well.