For only viewing your own details, I think the fastest way is to create a view with a fixed domain, for example "[('id','=',uid)]" or something like that. That way, for that view the user will only be able to see his own details.

For each object you want the "create" button to disappear you need to work the access rights for the said user. If he/she has create access rights on for example "hr.employee.contract" object, then in the list it will say "Create". If the user has only read rights, those options will disappear.