For those who can’t wait, here’s a makeshift approach to permissions. It crashes the doc for the user immediately when they try to see what they are not supposed to see.
Not 100% bulletproof, but still.
(also it’s more of a joke than an actual solution)