I have a tUsers table with their [PermLevel]
A gets admin and all rights
M (manager) gets some rights
U (user) get minimal.
At FormLOAD event,
I get userID and Dlookup his rights. Then enable/disable items depending on level
cboState.enabled = mvUsrLvl = "A"
btnSave.enabled = mvUsrLvl = "M" or mvUsrLvl = "A"