I don't use the Access workgroup security because I've found more problems when using it that I care to deal with, especially when you want to upgrade a database (including conversion of the data to SQL Server).
Normally I set up a login form that uses a table (UserList) that includes the login information as well as the user names and rights. If you create a module where you define some public variables such as strUserID, strUserRights, you can then check the value of strUserRights (or whatever public variable you use) to determine what you want a user to see or be able to edit on a form.
For example, if you want to make a function that is accessed through a command button on a form available only to users with the rights = "Admin", you would do something like this for the on open property of the form:
if strUserRights = "Admin" then
' make command button visible
me.cmdSpecialFunction.visible = True
else
' hide command button
me.cmdSpecialFunction.visible = False
end if
Bob