Added user role check before form creation