New Permission Type (Edit without User Download)
It is not possible to allow a user to open in Office Online (or other apps) without the user also being able to download. Because Office Online relies on the permissions granted to the user to execute, i.e. it uses the user permission to download to get the file from Box, therefore the user must have the ability to download.
Not currently planned at this time.