Let me start with a little background with the situation we are facing. I work for a healthcare organization that deals with protected health information. We are trying to create a sharepoint environment where it will be safe to publish such data but still allow for public access to the site. Ideally, only certain users would be able to access PHI content and either be unable to download that content to their local machine or only be able to download that content to approved machines.
I have looked to Excel Services to handle reports. It does a pretty good job at addressing the situation by allowing for spreadsheets stored in sharepoint to be opened in the browser. However, a user is still able to open the spreadsheet in Excel and then save as to their local machine which is unacceptable. Is there a way to disable the "Open in Excel" feature?
If preventing downloads from sharepoint isn't feasible, is there a way for sharepoint to somehow delegate access based on the physical machine accessing the site?