Desktop, Mail etc. The recommended way to stop users from changing the design
on a database is to not install the Designer client on the workstation of users
that you do not want to change the design of databases. This is not always
possible as developers sometimes require designer access to the databases they
are developing but do not need access to production databases. The only way to
prevent this is to manage the ACL properly and only give designer rights to
people who need it.