Okay, anybody out there doing something like this who'd be willing to share some knowledge?

We're using DNN for our company Intranet Site.  As such, our site "users" are actually our employees.  We're attempting to keep personnel information in DNN as custom user profile properties but, in doing so, we've realized that "users" (AKA our employees) have the ability to edit their entire profile which now includes some personnel information that should really only be managed by our HR Department.  Has anyone else encountered this and has anyone found a way to allow users to only be able to edit some of their profile information and not other parts?

I'm fully prepared to accept the fact that this cannot be done but I felt, before I threw in the towel, I thought I'd put this out there just in case I'm missing something that someone else has figured out.

Any help, including someone telling me "it's impossible" would be greatly appreciated.

Thanks,