To properly secure the database, you would take away the table access. You
would then build queries and base your forms on the queries. To make sure
the users can run the queries, you'd set them to "run with owner's
permission" in the query's property box.