The issue with web.config?

When I implement .Net application in design period then web.config file is text file and is editable. If I use VS.Net package tool to package application and distribute to client's machine. The end user can edit the web.config file?
I doubt it can't be edited and also hide in the exe file.
Thanks in advance!what?
I'm not quite following the question, but if you mean what I think you mean,of course the end user can edit it if they want to. you can't stop them. explain yourself.

I set the security level in the web.config and distribute the client machine the installation package. It the end user can edit the web.config in his/her machine, then what I set for security not meaningful - I can't set secrity from web.config.
still not quite making sense.
I think I know what you're on about, and yes, if you want to use a textfile to control your security, then your security will be quite trivialto bypass...
perhaps you should actually explain what you're trying to do with web.configexactly