Authorization levels for form management