Restriction of access rights to read expression values is set in the security manager. To do this, you need to set permissions for a role from the Data Access category. Thus, all users associated with this role will only have the selected set of rights.
