you need to change all your forms and objects that are affected.
ie - add code to do what you require.
you either need to explicitly grant or deny permissions based on the user name. doing it this way is a pain, as it means you have to amend your database with each change in user.
The other way is to manage users within user groups and grant permissions to the user groups. The programming job is roughly the same, but to add new users all you then need to do is add them to the appropriate groups, which can be done easily without changing the database.
It's not trivial though. You need code for every object that you do not want everyone to have unlimited access.