How to preview Attachment in browser instead of download, and restrict user to save,cut,copy,paste

Content disposition[^] is actually an advice to the browser. With attachment will prompt file for saving, but inline can be presented only if a proper plugin of that browser is present, the browser is able and configured to use inline viewing. You will be not able to prevent saving of files presented in this way. The ability to edit a file depends on the permissions present in the file and the application opening it. PDF has built-in features to prevent copy and paste, Word and Excel have also such features. But there are unlockers and password recovery tools out there... The only approach that can really harden against unwanted operations, is to convert the document in a segmented image format and present it on the web page using a plugin, or a properly tailored javascript application (like google maps presents the satellite images). The problem is, that you need to convert the document to image, and that is not always easy.
Keep in mind, what you allow the browser to get from your server, that is already on client side, and is exposed to the user.