A lookup field that contains a number formula displays properly on the form except for 'viewer' role

Thanks for the tip, I think that'll work out just fine. Are there any backdoors to the data via typing anything directly into the address bar that I should be worried about?

It seems that the URLs used for accessing reports, forms, etc. consist of strings that wouldn't easily be able to be guessed by someone manually typing in the URL in order to access the data in the table without a link - is this correct?