then use something like :
sudo cdrecord dev=ATAPI:0,0,0 speed=99
driveropts=burnfree -eject $1
in a script with whatever you want to burn passed as a parameter.
That gives you control over access without pesky passwords.
Or change the permissions of /usr/bincdrecord to allow
execute by ordinary users.
/dev/cdroms/cdrom0 /mnt/cdrom iso9660 ro,user,noauto 0 0