A family of Microsoft relational database management systems designed for ease of use.
Instead of referencing the controls as parameters in the report's query, open the report from the form filtered to the date range by means of the WhereCondition argument of the OpenReport method, e.g.
Dim strCriteria As String
strCriteria = "EmpID = " & Me.fldEmpID & _
" And TheDate >= #" & Format(Me.StartDate,"yyyy-mm-dd") & _
"# And TheDate < #" & Format(Me.EndDate,"yyyy-mm-dd") & "# + 1"
DoCmd.OpenReport, "TheReport", _
View:=acViewPreview, _
WhereCondition:=strCriteria
Another option, and the one which was adopted in similar circumstances in my organisation, is to provide different classes of users with different front ends, each linking to the same back end. A copy of the appropriate front end was installed in each authorised user's personal folder on the system, to which only they and the system administrators had access, the back end in a shared location. In each front end the form, report and query definitions were tailored to the level of access for which the user was authorised, or those objects for which a user had no need were simply omitted from the relevant front end. In your current case you'd simply use a form of the same name in each class of front end, designing it in each case for the relevant level of access. The report and query would be unchanged.