mongoDB: Limit user to find documents only by ObjectId
Currently, The lower level you can control the access of resources is at the collection level.

One option you can try is to create collections at each user level and give the user access to only that collection.