You use PubNub Access Manager to grant (and revoke) read and write access per key, per channel and even per user per channel.

See the Access Manager knowledge base articles for more information.