Marga,

Unfortunately, I do not believe you will be able to prevent users from
saving the form template to their own computer and changing it. InfoPath
needs to download a form template from the web server so that the users
could fill it out; the same operation can be performed with a browser.

That said, if you are concerned with your application logic being
overridden, you do have power. For example, if you have a total cost
field in the InfoPath form that is calculated as cost * quantity, and
you are concerned that someone will download the form template to their
machine, modify it, and submit a malformed, malicious request to your
web service, thus obtaining goods/services for less than cost *
quantity. What you need to do is to put (or replicate) all data
validation logic on the web service side. This will help you make sure
that the data does, in fact, satisfy your business logic.

On the question about getting the published location and version: yes,
you can obtain these through the Object Model - usew Solution's URI and
Version properties (more info in the SDK OM manual). Yes, you can send
these to the web service as well.

Good luck,
Alex @ Microsoft

-----Original Message-----
From: marga [mailto:marga@discussions.microsoft.com]
Posted At: Friday, May 13, 2005 4:57 PM
Posted To: microsoft.public.infopath
Conversation: protect form template
Subject: protect form template

I want to protect form template. And also prevent users from saving the
form
template and changing it. Is there a way to do this?

I am publishing form on a web server. I also wants to know if the form
is
being used from published location or from user's desktop. Is it
possible to
pass form location and version as parameters to webservice?