It's the update permission that you need to set to deny (under the courses tab if you don't want them adding courses) - 'update' is the permission check that controls if the user can add or remove items. There is a separate permission for each component (courses, competencies, objectives)

Simon