InfoPath Dev

Hi,

I have a browser InfoPath form that users can use to submit requests. If the user stumbles upon the actual SharePoint list that it writes to, I don't want them to be able to edit/add items to the list manually. If I can run the form as an admin (or me) then I can give the user view only permissions on the list. (I've looked online for a solution, but haven't had any successful searches).

Although that would be the preferred method.... The solution that I came up with is that I made a SPD workflow that copies the list item (impersonation step) into another list (user has view only permission). Then the item in the original list is deleted. This works fine with the exception that the list items can have attachments, and for some reason these don't copy over (using the copy item from current item to "other list").

Any help with either situation would be great! Thanks for any help you can provide.

Gwen 

 InfoPath 2010 - SharePoint 2010 - qrules 6.1

I did more testing on the workflow piece (and some more research)...it looks like the copy item should work with attachments (what I found online). I tested multiple times... it looks like it works if the workflow is freshly published, but subsequent tries are flaky and typically don't move the attachment. If I republish the workflow, it will work again on the first try. This is very odd.