Hello again! 
My main goal is to allow the user to add an entry through the interface (Interactive insert) but just after adding it, disallow any changes (edit/update). I understand that it cannot be done using standard role access settings?
By now I'm using a trick: The catalog has a boolean flag that is set to true just after adding it to the database, and the "Update" role setting has access restriction that disallows changes when this flag is set to true. However I think it's not an elegant way to solve this, rather a "dirty trick".
Is there any other, more elegant way to accomplish this task? I'm using 1C 8.2.14.528