A reader field, as suggested by D Porter, will certainly work and give you the best security if that is what you are looking for. It also brings with it a possible performance penalty in a database with many documents. A lighter-weight option is to use a single-category view (also, less secure if there is a concern about users seeing each others documents).