Mike,

your observation is correct. The token [user:roles] is not available inside form and List, as it requires the same security level as system messages. The ******** you are seeing are returned for every locked content.

This constraint makes usually sense, as there is the high chance to output sensible information of your users through power users who are not Adminstrators.

We need to discuss that issue inside team.

For the moment your filter is only available within XSLT 

Gentlemen,

That did the trick.  I made  a copy of the  advancedtable.xsl. I modifed 1 line.
Look for <xsl:variable name="filteredData"  and modify as in the following

<xsl:variable name="filteredData" select="udt:Data[(contains(/udt:UserDefinedTable/udt:Context/udt:UserRoles, concat('|',udt:Program,'|')) or (/udt:UserDefinedTable/udt:Context/udt:IsAdministratorRole = 'true')) and (contains(*[name()=$searchColumns][1],$search) or contains(*[name()=$searchColumns][2],$search) or contains(*[name()=$searchColumns][3],$search) or contains(*[name()=$searchColumns][4],$search) or contains(*[name()=$searchColumns][5],$search)or contains(*[name()=$searchColumns][6],$search)or contains(*[name()=$searchColumns][7],$search)or contains(*[name()=$searchColumns][8],$search)or contains(*[name()=$searchColumns][9],$search)or contains(*[name()=$searchColumns][10],$search))]" />

Where udt:Program is the name of the field that is compared to the security roles.  This is slicker than chicken snot on a pump handle.
Thanks for the help and the education.

Mike McDonald