User doesnot have permissions and he cant see CI on OOTB forms. (SmartIT and Midtier)
I have create a custom form (join)
he can wiew the CI on this form.
I expect he shouldnot see the CI cause he doesnot have permissions.
Did you check form level permission? Is this Public or for particular group?