Deb, is this 4.4 or 4.5? If so it may be easier to use a script. On the post read event of these master tables you could fire off a script to test if the user belongs to a role, like ""History"", and if they don't, the script could disable these folders. Here's an example of the script:
retVal = 0
retVal = oSession.AsObject(oSession.Security).IsMember(""History"")
if retVal = 0 then
retVal = oScript.SetUIControl(""fldr.pSummary"",""DISABLE"")
retVal = oScript.SetUIControl(""fldr.pHistory"",""DISABLE"")
end if