Node reference URL in Drupal 7
You can do it by setting the appropriate permissions. For Drupal 6, content_permissions is part of CCK, and lets you set permission for every CCK field of your content type. For Drupal 7 you can use the Field Permission module.