1. If you want USER not to access document properties, you need to disable this as ADMIN on Setting - Document properties - Security.
Other way round, if you want the user to access the document properties (excluding security setting), check the appropriate option as ADMIN on security tab.
2. Have you tried this script? I would assume that none of these users will get access at all, given the HELP stating
Access to QlikView documents can be authorized for specified users or groups of users. In the security table, users can be assigned to the access levels ADMIN or USER. If no access level is assigned, the user cannot open the QlikView document.