TM1 TI Process Object Security - Read vs Read/Execute

[donap]

Hello!
I can not seem to find a clear answer on my question --
  in our TM1 Windows application,
    >> we have a User Group that we want to have DATA ADMIN Access -- this group can SEE and EXECUTE TM1  TI processes in Architect -- works fine.

  **** however ** we have a second User group - we want them to be able to VIEW the TI Process Code in Production - but **NOT** be able to execute anything.
  This group is **NOT** Data Admin (or any Admin)  -- We want to set the process security to READ -- but also PREVENT the ability to EXECUTE. 
 
Is this possible ??
How??

Thanks
-Dona