Is there a way to restrict users from doing a push replication?

I know you can use channels to filter the documents a user has access to, but I am looking into a way to have users that can pull data and manipulate it in their own databases, but not push it.

Which version of couchbase lite are you considering ? Have you looked at filters on push replicator?