I believe access 2007 has no user level security.
I suggest split the database with a frontend as an AccDE and back end password protected.
The front end cannot be designed, so keep the designable version elsewhere so you can edit it then overwrite the AccDE when needed. The data remains unchanged in the back end.