CDF should have different home screen when a Read Only User logs in and when a user with Administrator privilege's logs in (with R/W access). Content on CDF home screen after logon, should load based on the user privilege's. What each user has access to needs to be configurable by the Administrators. Only Read/Write users (and administrators) should see the full set of options in CDF. Where as a Read Only user should only see the specific functionality tabs assigned to them, like “Explore Data”, “Charts” etc.
Each project should have the ability to configure the default set for Read Only Users and then Administrators should be able to add/remove access to different functionalities, as determined by the organizations data management policies.