[Palmer ofShinra]

Simple...

You find the getpostbit function in functions.php

Add a line that checks permissions to see if the person is authorized to give points.

Example - Only admins can

if ($bbuserinfo[usergroupid]==6) {
$points="blahblah"; <-- make that the code with the link
} else {
$points="Points: $post[field5]";
}

I have an even cooler solution working... but I'm keeping that to myself.