There are several ways you can filter data to be shown to users:
1. Totally hide a form by refusing to grant visibility (please see Grant rights to catalog objects).
2. Use a static filter condition (please see How to - Set a Source Table in a Data-Entry Form)
3. Use a POV
4. Edit the data sent to clients in events prior to Read (please see Events and What happens when a User performs a Read?)