What OS? If it's windows, would cloting anti-virus software helps?

you now can kind of implement that with latest version, that "publish account" can only view document, while main "account" can normally edit (like you used to do)