Wrote a test to verify that restricted users can create a form and tag it as restricted; this makes sense because a creator can always access his creation.  Restricted users cannot update a restricted object entered by another user.