Barton,
If this is a single record form or a form where the security values will change for each record, you could use the _access code (from previous msg) and pull whatever you need from the security obj in the refresh() of each control. Refresh the form after the form init.
If this is a single record form, you could save your changes to the securityobj in each control's destroy method before the dodefault().
Dan