I bet you can do what you want with file system permissions though, if you're clever. IF not, you should look into using ACLs. Provided your kernel and filesystem have support for them (ext2/3, ...