alas, if they are opening the CR development environment, they can change the report any way they want.
I've heard various schemes to prevent users from changing the report, but none work except setting the file to read only...but how hard is that to get around? ... just not 'accidently'
sorry I don't have happier news