We have created a SharePoint framework app which adds items to SharePoint List. As we are in client side we gave "Contribute" level Permission to all the users to edit the form (to add update the List item from form). Is there any way to restrict the users on updating the items directly from List. We have already restricted the user on accessing the site contents page and list pages using javascript, still the users can edit the values using rest API or direct item link.
Any other approach to restrict the same and update the item on client side also will be helpful.