Oracle Forms

I have a group of users that require read/create/update access when using our application front end and read only access when viewing data using development tools such as sql developer or pl/sql developer.
I would like to find a method of limiting temptation/risk of our management information/support teams from updating data in our live system while giving them the tools to they need to support the application.

Unfortunately our application uses standard oracle user accounts/permissions. These permissions could potentially be quite destructive and as our application is developed by a 3rd party we are unable to change this.

If there any way that I can create a read only connection for these users?