The way to give a user the ability to take or update the picture on the Demographics page, without being able to update any other fields on the Demographics page would be to use a Security Group, with Field Level permissions to STU:
1. Create a Security Group. In the Group, give Read and Update to STU.
2. Click on the Fields button to control the individual Field level permissions.
3. At the top right of the Field level permissions, click on the x on the Update header, to set all of the fields to Deny.
4. Find the Student Photo (BM) field. Change just that one back to a green check box.
5. Go the User's account, and add them to this new Group that was created.
Now, when the user goes to Demographics, they'll have the icons next to the student's picture, where they can take a picture, or update the picture.
And at the bottom, they'll have the Take Student Picture and the Update Student Picture buttons. They'll also have the Change button, but if they select that, all the fields will be locked, so they won't be able to change any data. They'd have to choose Cancel.
