you are using a recordset binding in the access rule.
you cannot use recordset bindings in the access rule.
You will need to edit the Log in behavior to save the access level column to a session, then use the session in the access rule.
for user level access details, see the following tutorial:
http://www.webassist.com/tutorials/User-level-authentication-with-SecurityAssist