How to prevent specific method calls to bitcoin node
Bitcoin-core has no built-in mechanisms for restricting access to the API.

For your goals, you need to use a proxy between the user and the node.

For example, https://github.com/rsksmart/rskj/wiki/Nginx-Proxy-Server-for-JSONRPC-Calls