That's a good method, I agree. I guess I always look deeper than necessary
when I think about securing an Outlook form. A truly secure form would have
to evaluate the user against managed permission levels and group
memberships - all of which is way too complicated to build from scratch and
not feasible for Outlook forms.
But a simple - "oh, you're UserA - lock these fields; otherwise, go nuts" is
perfectly doable as you say.
Eric
Actually, you can, pretty reliably (never 100%, of course) by using code
that blocks in-cell editing -- see the discussion from last month at
http://www.outlookcode.com/threads.aspx?forumid=3&messageid=25844. The other
piece that would be needed in Rob's scenario would be to expand the
Item_Open event handler to check the value of
Application.Session.CurrentUser and then make controls editable as
appropriate. (You'd want all the controls to be read-only on the published
form.) The article at
http://www.outlookcode.com/article.aspx?ID=38 covers
working with control properties.