How can we create an XSODATA service which only allows to read data?

You can forbid CRUD operations individually.

In your case, you can try this.

service  {  

TableName as "entityName"
      create forbidden
      update forbidden
      delete forbidden;

}