How can I create a user with no posting privileges

Is the CEO a staff member or admin? Then yes.