Session variables can be set with Security Assist Login, or by using the Set session varialbe server behavior that comes with cookies toolkit and eCart. You can create a rule with SecurityAssist based on that session variable and then use the Security Assist "Show If" server behavior to hide or show buttons based on that rule.