InfoPath Dev

 All,

Using InfoPath, SP 2010.

I'd like to know how you use or set up a deny access/you don't have permission view.

If a form has multiple stages and only certain people are allowed to view certain items on a form at a certain stage, how do you prevent others from seeing information they aren't meant to. Yes, I know you can use, rules and views, but what if you get the rules/views wrong so that a person opens up a default view and sees things they shouldn't?

 I use rules and views - but keep in mind that as long as the person has access to the XML they can see the data in the main data source - the XML can be opened with a text editor. So - if it is a high security sort of thing, I'd use separate forms for the different info and make sure each user only has permission to the forms he/she should be allowed to see the data for and then create another form that could compile the different data sources for users that are allowed to see the data. If there is data someone shouldn't see, they need to not have permissions to even find / download the XML in question.

Thanks, Hilary. I appreciate your response. I learn I need to create a simple 'security' matrix so that everybody can easily see you has access at any stage of a form or view. My form has too many views, too many backend security lists and then workflow emails. The two didn't necessarily marry up.

Now that I've figured out how to do variables in workflows and put all security into one list - going forward, my issue shouldn't arise again. New forms should also be easier going forward.