Can't you do that with regular Unix permissions?