Using security assist access rules and show region is not the correct tool for the job.
the issue is that the require once line for the security assist helper file gets added to the page before the recordset is defined.
But even still, you don't need to create an access rule and use the Security assist show region for this. Instead, use the Show region Utility.
Select the region to show / hide, then go to the Server behaviors panel, click the plus button and go to WebAssist -> Utilities -> Show Region Utility