I created three category and don't want any user can create another.
That's already the case. Frontend category creation isn't possible in GJ 3.x.
I create Group. I don't want any user can delete or update this group just join it or create another.
They won't be able to modify it or delete it since it's your group. They can only join it.
I try many solution. I think it's possible if user don't have the Publisher right. But i need this group for my user.
If everyone can modify your groups then you've CB Moderator permissions set wrong. Navigate to CB > Configuration > Moderation and ensure "Moderators View Access Level" is set to something restrictive.