The runtime-only version does not allow the end-user to create or modify queries. They can only run pre-defined queries.
The select-only version does not allow any other statement than "select", so that other DML, DDL, and system commands are disabled.
Both options require an option-file, which is available on request.