In Service Center it's not possible to grant permission to a user to download all the espaces without grant them the permission to publish too. ( Full Control over all espaces) 

In Service Center in the Security Settings for User or Role, the ability to select in the option eSpaces: the "Download only over all espaces.". In the moment exists only the Read only over all espaces and Full Control over all espaces.

Thanks