Is there a way to customise the database window in Access to let users have access to queries and forms only, therefore disabling tables, reports, macros, etc.
The users should not have access to the database window. They should be allowed to access the data from the forms.
Access security with workgroups and permissions is the best way to control what the user can access [or import from another database] so that your db and objects are protected.