How do I log expenses for main projects but restrict time entries?

You cannot log time and expenses to a Main type project. You must change the main project to a standard project first and then add expenses to it. You can add a rule to the project to prevent users from making time entries for it (Projects > Assignment).