User Access to Receive Money Only

Using Cloud Edition,

(1) how do I restrict User to Receive Money only?
(2) how to restrict User to view a particular report but cannot use it to create trn?

User permissions don’t go this far and not sure if they will go this far.

If you are looking for having very limited interface, then this would be best solved using new API which is coming soon.