Hi,
you can check off required fields on the Choose fields tab or add these fields directly on the Visual Editor tab using Insert field... option.
Regarding the second question.
Unfortunately there is no easy way to restrict user access on the field level.
You can create custom view on the Datasource tables tab for users only and set up fields as readonly on this view.