The session variable shouldn't be linked to the userID, it should be linked to the user access level. Then you would want to check this user access level with the access level required to access the menu when generating the dynamic menu.
Your friends over here at WebAssist! These Dreamweaver extensions will assist you in building unlimited, custom websites.
These out-of-the-box solutions provide you proven, tested applications that can be up and running now. Build a store, a gallery, or a web-based email solution.