Is it possible to define different roles for different users?
Yes, with Citavi for DBServer. For each project users can be given either an author or reader role. Authors can make changes to projects, while readers have read-only access. Readers can still use a project to create a publication, however.