@Sam-I-Am thanks - i didn't think it was possible with permissions but just wanted to see if i was maybe missing something. i'll look us custom segments and see if that could maybe work. thanks!

Via workflow you can provide an error message according to this logic. Be aware of that if the user's role can view/create saved search he can see data unless you publish for this role very restricted dashboard without the saved search ability.