It's best to contact our tech support group at 800-892-0449 for issues like this. I've already alerted them on your ealier issue re RFI Gatekeeper Workflow so they'll be in touch and can address this issue too.
First thing I'd check for with permission issues like this is that you are not testing with a user who created the form-log or project & folders the form-log resides in. There is an 'Owner' permission which gives users who create projects, folders, and form-logs additional permissions beyond 'view'. This could be why your test user is able to do things with your form-log beyond the typical 'view' permission. A simple way to see who has 'Owner' permissions to a project or folder is rightclick-->properties and click the Ownership button in the General tab.
Mike.G
TSE