How do I allow certain users to access hidden fields?