The old way I've always done it was to trigger a script on load and set the fields to this or that (hiding, locking etc.). But since we got those new, cool, shiny business rules now, I thought I could give them a whack.
The problem is that I can't figure out how to specify a condition based on the current user's role... Where is it hiding?!