I have a custom ASPX page in WSS 3.0 which I use to capture email addresses. These emails are stored in a list called Notificiations using nothing but jQuery and SPServices. Because I'm using jQuery and SPServices, I can't use elevated privileges so everybody has to have read/write/delete access to this list.
So I'm trying to figure out what the best method is to prevent somebody from getting to the AllItems.aspx page for this list to seeing the content. I don't see anything stopping a clever user from going to http://somesite/.../Lists/Notifications to see what's there. I've tried to insert some jQuery to hide the webpart but that doesn't stop the email addreses from being seen if "View Source" is selected for the page.
I can check permissions on the page for the current user. If they don't have full permissions, should I redirect them somewhere else? The administrators should still be able to see the data and edit as usual.
Any tips/ideas here is really appreciated.
Thank you very much, dave