I had thought of that as well as using views but the app is already written as a single user app and employs hundreds of embedded SQL statements with about...

A column would be the most likely. Typically a user would be limited to a unique subset or all if he was the dbo or sysadmin.

The application is a...