you can certainly define those permissions and check to see if someone can view that data in your database