you would have to hand code an if statement for this.
where you say "only accessible to research, staff and site admin" you should have the user level session that is used to determine research, staff or admin. The if statement would need to compare that session and the value from the recordset.