The iOS built-in Parental Controls settings can be used to enable/disable access on an app-by-app basis; that's probably all that's needed here, since Camera + Photos by themselves don't give you any built-in web browsers. (Camera.app can scan QR codes, but it just pops a new tab in Safari when you click them, and Parental Controls would block that.)