this should happen Out of the box.
itil and internal users cannot edit Closed incidents
This is restricted via this OOB Table level WRITE ACL
If you don't want it for Resolved state also then create another table.None WRITE ACL and add condition as
State != 6
If my response helped please mark it correct and close the thread so that it benefits future readers.
