You cant use recordset values in access rules.
You need to edit the login page to save the user level to a session and use the user level session in your access rule.
see the user level authentication tutorial:
http://www.webassist.com/tutorials/User-level-authentication-with-SecurityAssist