I know you can use channels to filter the documents a user has access to, but I am looking into a way to have users that can pull data and manipulate it in their own databases, but not push it.
Which version of couchbase lite are you considering ? Have you looked at filters on push replicator?