we're using AS2 (publishign from Adobe CS3) and the webServiceConnector component to consume our .NET web services. This is all working fine from a SWF hosted at the same site, with send/receive working across multiple remote web service methods.

However, our .NET web services definition URL (the ASMX address) currently has html fields available for testing. These were enabled by adding protocols as per this link: http://msdn.microsoft.com/en-us/library/aa719747.aspx

As soon as we remove those protoocols for get/post (which DOES hide the HTML test form as desired), the flash web service integration breaks & it can no longer call methods.

we really need to be able to limit the forms to flash-only since a contest is involved (and we don't want a savvy person simply submitting any score they like!).

What are we doing wrong? Are web services inherently public (requiring that form) if you're going to trigger them from outside the .NET web application?