Thanks for the reply Doc Man, I will experiment with that tonight.
You brought up an interesting issue, blocking users from those records entirely, that may or may not be desirable, I would not see any downside to a user being able to view a record, as long as they couldn't change or edit it...