<A target="_blank" href="http://www.bleedyellow.com/blogs/m.leusink/entry/xpage_vs_form_security_create_only_access?lang=en">Mark Leusink explains how to use the ACL property in XPage documents</A> to control who can create or edit a document. He also provides a link to the XPages wiki for more security tips.