You would need to create a security key (permission) that you want to assign to the business object that will be read-only. Then, go to the BOMapper and assign that permission key to all of the fields on the business object (the same key to all fields). Then, when a user has that permission at runtime, any control bound to that field will be read-only.Only field-level security allows things to be read-only. We tried allowing forms to be read-only, but it was horribly inefficient to cycle through all of the controls on a form to make them disabled, and you cannot set a form's Enabled property to False without some interresting reprocussions. So, you'll have to stick to making fields read-only.