InfoPath Dev

I am fairly new to InfoPath but I was "volun-told" to create a new performance evaluation form. The form is pretty basic -- no DB interaction; a little jScript is used to toggle control visibility & calculate the score. Here is the basic review process:

1. EE provides SUP with pre eval / refresher
2. SUP complete eval form
3. SUP & EE discuss
4. SUP sends form to EE for post eval comments (rebuttal)
5. SUP & EE sign
6. Printed form sent to HR

My problem is wuth step 4, Sending the form is no big deal but I am being asked to protect all the fields on the form except a few EE comment fields. Anyone know of a way to accomploish this?

I was thinking that the EE could take a blank form and complete the comments fields and the SUP could merge -- copy & past if necessary -- it into the "master".

I think I'd add a field the Supervisor could use to mark the eval complete. Hide that from the employee -- user roles might work for this. You could have a certain role set to initiator -- since the employee starts the process, you could hide that field from the initiator role. Then, when the form is marked complete, set other fields as read only. Since the Supervisor is not the initiator, if something needed to be modified after the employee has commented, the Supe could deselect the 'completed' checkbox and modify the necessary fields.....