You can create a section access and put all the script within the hidden script. They will be able to access the documents and see the tables (and that makes sense) but if you tweak the security preferences, no users will be able to edit script or print or anything you have not allowed them to.
Is not binary, since everything is there (script, data, objects) but users cannot get to it.
The situation is that the user works locally and wants a local Excel file added (only for personal use!) temporary.
This person can not reload the data from the server and is also no allowed to do so ...
Partial reload is in this case not something of use I guesse? The report itself should reload totally on the server (Full Reload) ... this report should be distributed to our special user. This user wants to have the possibility to add Excels locally ...
If you know beforehand the structure of the columns and data the excel will have, you can prepare the script with a simple conditional so if the file is in the directory, the script loads it renaming the fields to fit into the data model and so. But this means the user will always use the same XLS structure for his files.
I don't see any other good option rather than let the user create an empty document with the excel files, and then incorporate the script to the main document. But you cannot (at least I don't see how) let the user "edit the script" (to add his excel files) but not "edit the script" (modifying the already existing code), rather than putting all your existing code in the hidden part, so the user is unable to modify it, but he do is able to add new code (loading new files) to the existing model.
The hidden script will load with no need of section access or any other settings in the server.