setup a guest account and limit its permission

is good enough, if as this, he still can hack your file, then noway to block him to do anything for your computer

请您先登陆,再发跟帖!