I would not call the staff idiots.

I would suggest the rules can seem complex to some employees and often retraining is required - especially when staff had been instructed by managers who themselves misinterpreted the access rules.