Why can users with Depositor access create documents even though I have enabled Public Access on the form?
This can happen if you have any @DbLookups in fields on the form. Even if you enable users to have Public Access to the form and to the views used by @DbLookup, you will have to give Reader access to the Replica ID in the database to the ACL. For example, you would add an ACL entry of “85255CEB:0032AC04” with Reader access.