Yep, I checked that already and if they weren't allowed it should block it even on the 2nd attempt. I don't understand why it isn't working but it should work another way by just doing...
forms("formname").filter = "[ID] = " & sID
forms("formname").filteron = true
Sorry, I should have thought...