End user should to customize the thier own conact from GAL

Hi
 
I  want end user should to customize the thier own conact from GAL In exchnage 2003.
 
we have following set up.

We have webbased application to edit contact.
 
If I give read and write properties in delegation control, through aplication we are able edit the contact.
 
But what I want is some of the attributes should not be edited by the end user like Designation, display name.
 
And one user should not edit other user contact from Gal.
 
One more thing what I found is GAL edited in aplication is updating properly in OWA, but not updating in OUTLOOK.
 
How can gain this kindly help ....

Thanks,
 
Mohan