Earlier quoted context omitted.
I'm one of the Metabase team, and for what it's worth, we support read-only users now!
Kind of... I mean, we use it very heavily in my current company. And we are always looking forward for a new release. What you cannot do right now (v0.22.0) is let some people see cards but not create "new questions". I know the current release being developed is tackling something akin to "published dashboards", so I am very happy. Btw, great work! you cannot imagine how happy Metabase made both our Devs (we didn't…
> What you cannot do right now (v0.22.0) is let some people see cards but not create "new questions".
You definitely can do this with "Collections" (added in v0.20.0 I believe). You need to make sure to revoke all the "Data Access" and "SQL Queries" permissions for all groups the user belongs to (including the "All Users" group), then give their group "View" permission to the collection you want to allow them to view cards in.
(Now that I think about it, I'm not sure why we don't have a similar permission for cards that aren't in a collection.)