global condition clause

I would like to restrict database calls globally. Specifically, I
have a project mgt program and want to restrict access to projects on
a user basis. Among others, I have a user and project model. I can
place a condition clause on a relationship, but can I place a
condition on the model itself?