Well...
having not done this... here is my logic...
you have 2 options.
user group level...
say 1 being the highest
when form opens, cmdbutton is hidden...
on open, if user group level = 1, then cmdbutton.visible = true...
2nd option, make a new passwordform, modify it a bit, to open...