Hmm,

I can't really think of a nice way to solve this. You are correct that if you take away write access you also block the create. The only thing that leaps to mind is to inherit the model, inherit the write method and raise an osv.except_osv for that user(s) before you call super.write.

Not the most elegant solution but it would work. Write is only called for updates to existing records, the orm create method is called for new records.

HTH,

Adrian, Auckland, NZ.