You'll also need to add a check to members.asp for the approriate mlev as members will still be able to access the page simply by typing the address into their browser. There's already a check in there to ensure that anyone trying to access the page is a member of your forums, it would just need a wee tweak to prevent anyone other than forum staff from accessing it.
Search is your friend “I was having a mildly paranoid day, mostly due to the fact that the mad priest lady from over the river had taken to nailing weasels to my front door again.”