before each form is loaded, i check there privileges by querying the database
Maybe you should find a way to check for user privilege once they log in and store it in the user object (assuming you have one)