Supplier Entry - Restrict all fields except three

We have three users that need access to update only three fields within Supplier Entry (quality rating, etc.). In addition they may need access to the entire Contacts tab to create new contacts. What are some thoughts and suggestions on best way to do this?

Better off exposing a updatable dashboard for those users


Create a UI customization with extended properties on the epiviewnotification method. The other option is to use field security