Restrict User access based on a field?

this may give you some ideas