...
The security of a form that is extended works like it would work if it was not extended, you can set security on all the elements you see on the form even if they are inherited. You have to set the security on the form the user uses and not on one of the super forms. In the security tab you will see from which form the elements are inherited.