global condition clause

I would like to restrict database calls globally. Specifically, I have a project mgt program and want to restrict access to projects on a user basis. Among others, I have a user and project model. I can place a condition clause on a relationship, but can I place a condition on the model itself?