Our users submit requests that have billing details, etc. that should not be visible to the submitting users OR some of our production team. These billing details are currently set up in a separate custom form for easier updating and to try to manage visibility (which is not really successful). Our forms are attached via queue topics.
We need to be able to:
Control who can view a custom form and who can modify it (can do).
AND
Allow a custom form to be attached to a request without the requestor seeing that it's attached (cannot do).
