Enable record creation but disable subsequent editing


I'm looking to allow for a custom module record to be create-able - but to disable any subsequent editing (either inline, via subpanels, edit button, etc). I'm using sugarcloud, currently at version 10.3.0.

Whether admin users' editing rights are disabled doesn't really matter, so whether the solution is ACL-based or metadata/code based doesn't really matter.

Any suggestions welcome - thanks.