Put the reports in a separate front end mdb file, put the forms in another
separate front end mde file and put the data in SQL Server with appropriate
permissions according to user.
Anybody can edit the reports, nobody except developers who have access to the
original mdb front end for the forms mde file can edit the forms and read
only data users will have to log in with different user name and password if
they want to edit data, so SQL Server needs to use mixed mode security.
You can add a db password to the forms mdb so only developers can open it,
but that's not very secure. It's best to leave dev files in a dev folder
only developers have Windows access to.
Chris