I'm not sure who you mean by "user", however, as the basis of this software is that of form submissions, you can't restrict someone from completing a form unless you password protect. You are able to give an administrator "view" privileges so that they would be able to see all entries, but they wouldn't be able to edit them.
As of version 4.8, you cannot disable specific report exports.