And they need a tab event to do that? Or could it just be done with a button on the toolbar.

One doesn't need broad security permissions.