For a new SharePoint application we're constructing, we have a requirement which says a user may enter data in a list, but may not edit or delete the data.
So I thought of creating a list (probably hidden) and setting the permissions so that a normal user doesn't have Contribute rights on it. But that leaves the problem of inserting. For that I thought of creating my own webpart in which the data could be entered, and I could use elevated privileges to insert the data into the list. But then it would be entered as System Account (created by / modified by) and I don't want to happen: I need it to be created as the logged on user.
Is this possible? Or are there better solutions to satisfy this requirement?