If you implement your own Consultingwerk.Framework.Authorization.IRequestAuthorizationProvider service and register it in a service.xml you can validate the requests based on whatever you want.
METHOD PUBLIC LOGICAL IsFetchDataRestricted (pcEntityName AS CHARACTER,
poRequest AS IFetchDataRequest):
IF SessionManager:UserName <> "Roger" THEN RETURN TRUE. ELSE RETURN FALSE.
END METHOD.