The attached database has two accounts and one layout. Neither account has a password.
If you log in as Admin, you can see both fields on the layout. If you log in as Lobotomized, you can see only the Visible field. This is good.
If you log in as Admin, you can add or delete records. If you log in as Lobotomized, you can't add or delete records. The latter is not good.
How do I fiddle the privilege set so that Lobotomized can add and delete records, but still not see the Invisible field?
(Note that making special versions of layouts is not feasible in the case of this application.)