I have my application deployed in Access Point. In document settings, I have unchecked all the User Privilages, still the user can add new sheet and create reports using AJAX plugin (Chrome).
Using IE plugin users are unable to add sheets but they are able to customize tool bar.