I used a similar approach to restrict the data that sales reps could see, and limit them to their accounts only.