Question
Is there any way to allow the staff members to create credit/debit memos, but forbid their release?
Answer
No, there is only the privilege ARDOCS_CREATE which allows ARDocs creation and release. There is a feature request with id #PBA-79990 ("Ability to create documents and restrict release") to implement the requested functionality.