Trying to emulate user and group security with VBA in accdb/e which doesn't support this is going to be a lot of hard work and probably not going to work. Your best bet would be to have an authorisation class module,use the windows logonuser api call which is what we do or use an MDB database not accdb
Unless you specifically require some of the additional functionality found in an accdb you will find it easier to implement user and group security by saving the database as Access 2003 MDB file which supports this and can be specified for MDB files from Access 2007.
However this is still not that easy to set up, but a damn site easier than what you are proposing and a bit more secure - storing database passwords and user names in tables in the db is not a great idea.
http://www.access-programmers.co.uk/forums/showthread.php?t=154137 gives a good intro to this
Access 2007 also doesn't support replication which is a pain in a multiuser / site environment.
We run our maintenance management system using an accdb and we use the logonUser API call, to get the windows user name they then enter the database encryption password. So the db User is always who is logged onto the windows domain. Users are a assigned read/only, append and edit rights As the db is multiuser the backends tables and queries are all completely disconnected from the front ends and all data transfer is handled by ADODB Recordsets.
We handle data management and integrity through good design and business logic modelling:
a) Don't bind forms directly to tables but use paramaterised queries
b) All recordsets that return large amounts if records for analysis shall be read only
c) Once a process is finished and approved by a manager the record shall be locked and become read only
d) Permissions are set against assets in the asset register to append, edit, approve
etc etc
the whole lot is contained within class modules - the only code in the forms is basically there to initiate the classes from events an point the recordsets at controls
This is not perfect but it kind of works, I wanted to use SQL server which is much more secure and a lot easier to set up permissions at a table level than access. Management said no to the moderate price tag for operations and maintenance management. They did spend gazillions without a second thought on our Oracle Bean Counting application