you want to implement an access control list in which only the users you specifically authorize have access to the resource. anyone not on the list should be prevented from having access.