You have to specify the privledges in the user's account setup. The user cannot be an admin. Create a new user or modify an existing "limited" user by selecting the user and then clicking the "Capabilities" button. There you will see many options including "Remove items from the dock" Uncheck this and then that user cannot remove items. I believe they are not able to add as well.
Hope that helps.