It works for me: If I set register Level=Read in the access groups, I cannot copy (via "duplicate" menu item) that register neither from browse nor from a inspect window.