LBI Backoffice to GL90 security

Has anyone been successful in securing GL90 when used as a destination from LBI Backoffice RW100 reports drill around? We need to be able to limit by accounting unit based on what rights they have in LBI when they arrive at the GL90 form from LBI. Currently, a user can type in different accounting unit numbers and inquire on GL90 to see information that they are not given in LBI rights. We have tested security rules that do limit access based on a security group value but I am thinking that we should be reading the LBI Rights db tables so that this will be more easily administered.

Without a security rule that can read LBI Rights, I think our Conditional Rule Access we will have over 50 rules of if / else statements! Is there a better way? Thanks for any insight :D